The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” involves bypassing authentication by using an alternative path or channel, allowing attackers to circumvent existing security mechanisms.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK”, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information by intercepting network traffic.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a password hash instead of a password for authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

awesome-connected-things-sec

🔐 موارد أمان الأشياء المتصلة الرائعة أبحاث الأمان وتقنيات الاستغلال لأنظمة إنترنت الأشياء والأنظمة المدمجة والصناعية والسيارات. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS-8b5cf6?style=for-t...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 بيانات اعتماد مضمّنة CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt Changelog v7.0.46 ----------------- - fix of possible vulnerability as described here...

ICS-TestBed-Framework

إطار عمل منصة اختبار ICS يُقترح إطار عمل قابل للتوسع للنشر التلقائي لعدد من الأجهزة الافتراضية محليًا أو عن بُعد تحاكي شبكة التحكم الإشرافي والحصول على البيانات SCADA. يتضمن ذلك عدة مضيفين افتراضيين يحاكيون أجهزة الاستشعار والمشغلات، مع واجهة تفاعل بشري HMI تتحكم في المضيفين. يحتوي الإطار المقدم...

CVE-2023-30459

CVE-2023-30459 يسمح SmartPTT SCADA 1.1.0.0 بتنفيذ الأوامر عن بُعد عندما يكون لدى المهاجم صلاحيات المسؤول عن طريق كتابة سكربت C ضار وتنفيذه على الخادم عبر إعدادات الخادم في لوحة تحكم المسؤول على المنفذ 8101، بشكل افتراضي. كيفية الاستخدام: python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd...

recon-skills

🛡️ حزمة مهارات الاستطلاع والاختبار الاختراقي 169 مهارة أمنية هجومية للاستطلاع والاختبار الاختراقي. تقنيات معتمدة ميدانياً من أكثر من 600 هدف شركة عبر أكثر من 45 قطاعاً. محدّثة بتقنيات التهرب من بصمة المتصفح، وتجاوز الحماية من البوتات، وصيد بيانات الاعتماد المضمنة، واستكشاف أنظمة SCADA/ICS. 📖...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA كتابة ملفات تعسفية 👨‍💻 المؤلف محمد إدريس بن يامر 🐦 إنستغرام: @banyamersecurity إثبات مفهوم PoC لثغرة CVE-2021-41579 - كتابة ملفات تعسفية عبر ملف مشروع .els خبيث في LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 وصف الثغرة CVE-2021-41579 هي ثغرة من جهة العميل في LCDS LAquis SCADA الإصدارات ≤...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Nordex NC2 - Cross-Site Scripting

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...