pharos

Pharos Framework de Análisis Estático de Binarios El framework de análisis estático de binarios Pharos es un proyecto del Software Engineering Institute de la Carnegie Mellon University. El framework está diseñado para facilitar el análisis automatizado de programas binarios. Utiliza la...

Insider-Threat

Modelos de Grafos de Amenazas Internas R5.2 y R6.2 Este repositorio contiene preparación de datos, extracción de características y modelos basados en grafos GCN-NN, GCN-BiLSTM y GCN-BiLSTM+Attention para señales implícitas+explícitas para la detección de amenazas internas utilizando el Conjunto d...

The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU lies in the lack of authentication for a critical function, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Exploit for CVE-2026-8065

CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...

Exploit for CVE-2026-8065

CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...

Hitachi Energy RTU500

SUMMARY Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the...

CVE-2018-25379

Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attackers can inject SQL code through the lang parameter in login requests to extract sensitive informati...

CVE-2018-25379: Improper Neutralization of Special Elements used in an SQL Command

Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attackers can inject SQL code through the lang parameter in login requests to extract sensitive informati...

Collectric CMU SQL注入漏洞

The Collectric CMU is a smart meter device from Collectric in the Netherlands that supports power metering with supporting communication extensions. A SQL injection vulnerability exists in Collectric CMU version 1.0, which stems from the presence of Boolean-based blind SQL injection in the lang...

EUVD-2006-1721

Malware in sbrugna...

EUVD-2024-54517

Malicious code in bioql PyPI...

EUVD-2024-54521

Malicious code in bioql PyPI...

EUVD-2025-15123

Malicious code in bioql PyPI...

CVE-2023-6711

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an...

Hitachi Energy's RTU500 series Insufficient Resource Pool (CVE-2024-12169)

A vulnerability exists in RTU500 IEC 60870-5-104 con- trolled station functionality and IEC 61850 functional- ity, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerabil- ity only applies, if secure communication using IEC 62351-3 TLS is enabled...

Hitachi Energy's RTU500 series NULL Pointer Deference (CVE-2024-11499)

A vulnerability exists in RTU500 IEC 60870-4-104 con- trolled station functionality, that allows an authenti- cated and authorized attacker to perform a CMU re- start. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will...

CVE-2024-11499

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

CVE-2024-12169

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 TLS is enabled...

CVE-2024-11499

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically...