232 matches found
ECOA Building Automation System - Directory Traversal Content Disclosure
The ECOA BAS controller suffers from a directory traversal content disclosure vulnerability. Using the GET parameter cpath in File Manager fmangersub, attackers can disclose directory content on the affected device id: CVE-2021-41291 info: name: ECOA Building Automation System - Directory Travers...
BAS-Guardian
⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner Former repo| New location ---|--- Energy-Grid-Protector|...
BAS-Guardian — Updated!
BAS Guardian - Free Building Automation System BAS Security Scanner BAS Guardian is a free, open-source cybersecurity scanning tool that helps facility managers, IT teams, and OT security professionals detect internet-exposed Building Automation Systems BAS, BACnet devices, and HVAC/BMS controlle...
WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Cem Bas in WordPress Plugin Shared Files versions = 1.7.69...
apimeter (>=2.5.7, <=2.85.0), bas-web-map-inventory (>=0.2.0, <=0.4.0) +11 more potentially affected by CVE-2024-40647 via sentry-sdk (0.13.5)
sentry-sdk PYPI version 0.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - apimeter =2.5.7, =0.2.0, =0.2.0rc1, =1.0.0, =2.4.5, =0.9.8, =0.19.2, =0.3.0, =5.1.3, =5.1.2, =0.1.0, =0.3.1 Source cves: CVE-2024-40647...
WordPress Ads by WPQuads plugin <= 3.0.2 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Bas Albers in WordPress Plugin Ads by WPQuads versions = 3.0.2...
WordPress Ads by WPQuads plugin <= 3.0.2 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Bas Albers in WordPress Plugin Ads by WPQuads versions = 3.0.2...
a3m (0.1.0), aio-nxapi (0.3.1) +66 more potentially affected by CVE-2026-41066 via lxml (4.5.2)
lxml PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - a3m 0.1.0 - aio-nxapi 0.3.1 - ansible-playbook-grapher 0.10.0 - bas-metadata-library =0.3.0, =1.0.0, =2.0.1.post4, =2020.7.1, =3.16.0.dev2, =0.2.2,...
CVE-2025-68843: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This issue affects FeedWordPress Advanced Filters: from n/a through = 0.6.2...
PT-2026-21105
Name of the Vulnerable Software and Affected Versions FeedWordPress Advanced Filters versions through 0.6.2 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Reflected Cross-site Scripting XSS. This means that an attacker cou...
EUVD-2016-9205
Malware in sbrugna...
EUVD-2016-9226
Malware in sbrugna...
EUVD-2016-9209
Malware in sbrugna...
EUVD-2017-9116
Malware in sbrugna...
EUVD-2016-9217
Malware in sbrugna...
EUVD-2025-12031
Malicious code in bioql PyPI...
EUVD-2021-28322
Malicious code in bioql PyPI...
EUVD-2021-28326
Malicious code in bioql PyPI...