348 matches found
CVE-2023-1698
wagoexploit.py - CVE-2023-1698 的 PoC 漏洞利用程序 🚀 介绍 wagoexploit.py 是 CVE-2023-1698 的概念验证（PoC）漏洞利用程序，该漏洞是影响 WAGO PLC 的严重漏洞。此漏洞利用程序可授予攻击者 shell 访问权限 ，从而可能暴露敏感操作。 ⚠️ 免责声明： 此仓库仅用于教育和研究目的。未经授权使用可能违法。请负责任地使用。 🛡️ 缓解措施 要防范此漏洞利用： 更新固件：确保您运行的是 WAGO 提供的最新固件版本。 网络分段：限制不受信任的网络对 PLC 的访问。 防火墙规则：阻止对易受攻击端点的未授权访问。 📜 要求...
BLACKHAT_USA2022
BLACKHATUSA2022 关于 BLACKHAT USA2022 公开版 PDF 在 release 或此 镜像 中下载 文件列表，搜索你感兴趣的内容。 ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...
CVE-2026-12818
Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...
CVE-2026-12818: Allocation of Resources Without Limits or Throttling
Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs
Iran-affiliated cyber actors are targeting internet-facing operational technology OT devices across critical infrastructures in the U.S., including programmable logic controllers PLCs, cybersecurity and intelligence agencies warned Tuesday. "These attacks have led to diminished PLC functionality,...
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs CS series, CJ series, and CP series through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS 9600/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication...
CVE-2022-31206
The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...
CVE-2019-18269
Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...
CVE-2019-16871
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol...
EUVD-2018-19516
Malware in sbrugna...
EUVD-2018-19542
Malware in sbrugna...
EUVD-2018-19522
Malware in sbrugna...
EUVD-2017-15098
Malware in sbrugna...
EUVD-2020-28623
Malware in sbrugna...
EUVD-2018-19543
Malware in sbrugna...
EUVD-2020-5507
Malware in sbrugna...
EUVD-2019-7378
Malware in sbrugna...