CVE-2023-1698

wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...

ICSSecurityScripts

ICSSecurityScripts Industrial Security Scripts Beckhoff-CX9020-WebControl.py: Controlling the Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: Elaborate script for scanning AND hacking Beckhoff PLCs PhoenixControlPLC-ILC150.py: Print out CPU status and reverts it, tested and working on ILC150 ...

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

ICSFuzz

ICSFuzz: Fuzzing Tool for ICS Control Applications Overview ICSFuzz is an PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications by Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Installation The tool requires an already existing cross...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

ics-forensics-tools

ICSpector: Microsoft ICSフォレンジックフレームワーク Microsoft ICSフォレンジックツールフレームワークは、産業用PLCメタデータおよびプロジェクトファイルの分析を可能にするオープンソースのフォレンジックフレームワークです。 このフレームワークは、調査担当者にPLCをスキャンし、ICS環境内の不審なアーティファクトを特定する便利な方法を提供します。これは、手動チェック、自動監視タスク、または侵害されたデバイスを検出するためのインシデント対応運用に使用できます。...

CVE-2018-7842

CVE-2018-7842 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

Stuxnet

Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010...

CVE-2018-7849

CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7843

CVE-2018-7843 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2026-27867

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

CVE-2026-27867 CROSS-SITE SCRIPTING (XSS) VIA THE CMDCOOKIE PARAMETER REGESTA SMART HD-PLC OF TELDAT

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

CVE-2026-27867

The Regesta Smart HD-PLC (model TLDPH16D2 ) by Teldat is vulnerable to Cross-Site Scripting (XSS) in firmware version 11.02.06.00.02 . An attacker with network access and the required registration privileges can inject a malicious payload via the cmdcookie parameter within the /upgrade/index.html...

CVE-2026-27867 CROSS-SITE SCRIPTING (XSS) VIA THE CMDCOOKIE PARAMETER REGESTA SMART HD-PLC OF TELDAT

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

EUVD-2026-86931

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

PT-2026-98460

Name of the Vulnerable Software and Affected Versions Regesta Smart HD-PLC - TLDPH16D2 version 11.02.06.00.02 Description A network attacker with registration access can perform Cross-Site Scripting XSS by injecting a specific payload via the cmdcookie parameter within the '/upgrade/index.html'...

CVE-2026-27867: Improper Neutralization of Input During Web Page Generation

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

OpenPLC Runtime v3

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue state-changing requests as an operator which would allow the attacker to control the programmable logic controller and the physical processes it drives. 2. RECOMMENDED...