vulnx

vulnx Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities Quick Start root@kitploit: 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2025-41656

CVE-2025-41656 项目总结 本项目旨在模拟CVE-2025-41656 ——一个针对 NodeRED 的未认证远程代码执行漏洞。为此，我们创建了一个小型 SCADA 系统，包含树莓派、执行器和传感器。树莓派中运行着 NodeRED 和 OpenPLC 容器，两者通过 Modbus TCP 通信以控制执行器。此 Python 概念验证脚本用于执行 CVE-2025-41656 攻击。目标是成功构建 PoC 并找到加固系统安全的修复措施。 入门指南 实验环境将包含以下组件 树莓派 3b+ 包含 NodeRED 和 OpenPLC 容器的 Docker Compose 文件 一个执...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – ファンクションコード偽装によるModbus TCP読み取り専用コイルへの書き込み プログラムコード（pymodbusを使用したPythonシミュレーション） root@kitploit: modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import ModbusDeviceIdentification from pymodbus.datastore...

smod

smod smod は、modbus プロトコルのペネトレーションテストに必要なあらゆる種類の診断機能と攻撃機能を備えたモジュラーフレームワークです。Python と Scapy を使用した完全な Modbus プロトコル実装です。このソフトウェアは、python 2.7.x で Linux/OSX 上で実行できます。 概要 SCADA（プロセス制御ネットワーク）ベースのシステムは、近年、プロプライエタリなクローズドネットワークからオープンソースソリューションや TCP/IP...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368

CVE-2026-18368 Explanation: Teltonika Networks RUTOS devices are affected via the modbusgwd component. The vulnerability arises from improper handling of Modbus TCP request data, enabling a remote, unauthenticated attacker with access to the affected service to trigger a heap-based buffer overflo...

CVE-2026-18368 Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

CVE-2026-44107 Exposed Reboot via Modbus

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

EUVD-2026-51042

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-44107

CVE-2026-44107 describes an unauthenticated Denial-of-Service vulnerability in the Modbus TCP interface of the CharxModbusServer. If Modbus functionality is enabled by opening the port, an attacker can trigger a reboot of the charging controller via Modbus TCP without authentication, leading to s...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-12818

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

CVE-2026-54410 nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

EUVD-2026-36661

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

PT-2026-49133

Name of the Vulnerable Software and Affected Versions nanoMODBUS versions prior to 1.23.1 Description The Modbus/TCP server contains an off-by-one buffer overflow in the recv msg header function. Remote unauthenticated attackers can exploit this by sending a crafted MBAP frame with the Length fie...