boa-detector

boa-detector この Zeek パッケージは、HTTP ヘッダー内の Boa Web サーバー文字列を検出します。すべての Boa バージョンは脆弱であると見なされます: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ /^Boa/./ サーバー文字列が観測されると、このパッケージは接続の c$id$resph に対して、 通知...

OneAlert

OneAlert AI Security OS 産業ネットワークのためのオープンソース自律型サイバー防御 AIエージェントがOT/ICSインフラ全体の脅威を検出・調査・追跡・対応します — 人間による承認ゲートと完全な監査証跡付き。 デモセットアップ · 機能 · クイックスタート · アーキテクチャ 今すぐ試す ライブデモ: https://onealert-demo.mangoglacier-b3ad215d.southeastasia.azurecontainerapps.io/app/ | ---|--- メールアドレス| [email protected] パスワード...

CVE-2023-26866

CVE-2023-26866 説明 GreenPacket OH736 の WR-1200 屋内ユニット、OT-235（ファームウェアバージョンはそれぞれ M-IDU-1.6.0.3V1.1 と MH-46360-2.0.3-R5-GP）は、リモートコマンドインジェクションに対して脆弱です。コマンドはログイン前実行を使用して実行され、root 権限で実行されるため、完全な乗っ取りが可能になります。この脆弱性は Lionel Musonza によって検証されています。 脆弱性タイプ CWE-77 コマンドに使用される特殊要素の不適切な無害化（'Command Injection'） cwe...

AntiWeb_testing-Suite

ICS/OT AntiWeb: テストスイート はじめに ICS/OT に関連する Web アプリケーションで、Anti-Web サーバー（バージョン 3.8.7 まで）上で動作するものに脆弱性が発見されました。 特定された脆弱性は、プロセス産業オートメーションおよび通信業界の複数の有名メーカーに影響を及ぼします。これらのデバイスには、すでに類似した古い CVE（CVE-2010-4730 および CVE-2010-4733）が存在していましたが、報告後に 3 つ目の CVE（2017-9097）が採番され、ベンダーは直ちにパッチをリリースしました。その後もすぐに他のパッチが続きました。...

Rail-OT-Protector

⚠️ リポジトリはアーカイブ済みです このリポジトリはアーカイブ されており、メンテナンスは行われていません。 すべての開発は、統合された ICS OT Protector モノレポで継続されています: https://github.com/spinfosecurity/ics-ot-protector このスキャナーの場所 旧リポジトリ| 新しい場所 ---|--- Energy-Grid-Protector| scanners/energy-grid/ BAS-Guardian| scanners/bas/ Rail-OT-Protector| scanners/rail/...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - 关键认证绕过 🔓 CVE-2025-41646 - RevPi WebStatus 认证绕过 PoC RevPi WebStatus ≤ v2.4.5 中存在一个关键认证绕过漏洞（CVE-2025-41646），由于类型比较逻辑较弱（== 与 ===），攻击者可以在没有有效凭据的情况下以 admin 身份登录。 📌 受影响 RevPi WebStatus v2.4.5 及以下版本 运行在 Raspbian 和 Apache 上的工业/OT 系统 💥 利用...

AlmaLinux 9.2 [TuxCare] Security Update: harfbuzz / harfbuzz-devel / harfbuzz-icu (ALMALINUX9.2:CLSA-2025:1745945560)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745945560 advisory. - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of...

Rocky Linux 9 [CIQ] Security Update: harfbuzz / harfbuzz-debuginfo / harfbuzz-debugsource / etc (crlsa-2022_8384)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228384 advisory. harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc CVE-2022-33068 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 7 [TuxCare] Security Update: harfbuzz / harfbuzz-devel / harfbuzz-icu (CENTOS7:CLSA-2024:1723795896)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1723795896 advisory. - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking...

PT-2026-97042

Name of the Vulnerable Software and Affected Versions Autonomy Logic OpenPLC version 3 Description An improper neutralization of input during web page generation occurs in the web interface when routing programs based on a query string parameter that is not encoded. This cross-site scripting XSS...

Astra Linux – Vulnerability in Harfbuzz

An integer overflow in the hb-ot-shape-fallback.cc component of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS attack through unspecified vectors...

HP LaserJet Printers Classic Buffer Overflow (CVE-2023-27972)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

UBUNTU-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

Xerox Printers Clone File OS Command Injection (CVE-2021-28673)

Xerox Phaser 6510 before 64.61.23 and 64.59.11 Bridge, WorkCentre 6515 before 65.61.23 and 65.59.11 Bridge, VersaLink B400 before 37.61.23 and 37.59.01 Bridge, B405 before 38.61.23 and 38.59.01 Bridge, B600/B610 before 32.61.23 and 32.59.01 Bridge, B605/B615 before 33.61.23 and 33.59.01 Bridge,...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39826)

In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...

Siemens SIMATIC S7-1500 CPU 1518 MFP Integer Overflow or Wraparound (CVE-2024-49994)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505830; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Xerox Printers Remote Command Execution (CVE-2021-28671)

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

Siemens SIMATIC S7-1500 CPU 1518 MFP Resource Leak (CVE-2025-40300)

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. Existing mitigations already protect kernel/KVM...

CVE-2026-42933: Unintended Proxy or Intermediary

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation...

Cisco ASA/FTD Observable Discrepancy (CVE-2022-20866)

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...