CVE-2025-41656

CVE-2025-41656 प्रोजेक्ट सारांश यह प्रोजेक्ट CVE-2025-41656 को मॉडल करने के लिए मौजूद है, जो NodeRED के लिए एक अप्रमाणित रिमोट कोड निष्पादन भेद्यता है। इस भेद्यता को मॉडल करने के लिए, हमने एक Raspberry Pi, एक एक्चुएटर और एक सेंसर के साथ एक छोटे फॉर्म फैक्टर वाला SCADA सिस्टम बनाया। Raspberry Pi म...

sel4-ics-gateway-demo

Demo del Gateway ICS seL4 Un progetto di ricerca difensiva sulla sicurezza che confronta le architetture protocol-break e packet-forwarding per la protezione dei sistemi di controllo industriale dagli attacchi informatici. Documentazione: Architettura di rete - Diagrammi di rete e flusso del...

CVE-2021-26828-Ultimate

ScadaFlare - Toolkit di sfruttamento RCE autenticato CVE-2021-26828 Un exploit RCE modulare post-autenticazione che prende di mira ScadaBR 1.1.0, potenziato per le operazioni red team. Funzionalità Carica shell .jsp armate tramite viewedit.shtm Supporta payload Linux e Windows Supporto proxy SOCK...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Aktives Scannen und Informationssammlung in ICS/SCADA-Netzwerken mit Network Mapper NMAP Türkisch Diese Forschungsarbeit wurde bereits zuvor veröffentlicht; Sie können die Original-PDF-Version auch hier finden...

Advisories

Sicherheitshinweise Dieses Repository enthält mehrere Schwachstellen, die während Penetrationstests entdeckt und gemeldet wurden. Der gesamte Inhalt dieses Repositorys dient ausschließlich zu Bildungszwecken. Links...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Scrittura Arbitraria di File 👨‍💻 Autore Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Exploit proof-of-concept per CVE-2021-41579 - Scrittura arbitraria di file tramite file di progetto .els malevolo in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Descrizione della vulnerabilità...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 consente l'esecuzione di codice remoto quando l'attaccante ha privilegi di amministratore scrivendo uno script C dannoso ed eseguendolo sul server attraverso le impostazioni del server nel pannello di controllo dell'amministratore sulla porta 8101, per...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Autore Mohammed Idrees Banyamer Ricercatore di Sicurezza 📌 Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2026-25939 , una vulnerabilità critica di bypass dell'autorizzazione in FUXA software SCADA/ICS open-source. La vulnerabilità consente ad attaccanti remoti no...

Nordex NC2 - Cross-Site Scripting

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A system software information disclosure exists due to lack of authentication for /html/device-id. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16671 info: name:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

CirCarLife Scada <4.3 - System Log Exposure

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. id: CVE-2018-12634 info: name: CirCarLife Scada 4.3 - System Log...

CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project User XSS PoC यह रिपॉज़िटरी CVE-2026-36226 के लिए एक हानिरहित प्रूफ़ ऑफ़ कॉन्सेप्ट शामिल करती है, जो Advantech WebAccess/SCADA 8.0-2015.08.16 में एक क्रॉस-साइट स्क्रिप्टिंग समस्या है। यह रिपॉज़िटरी केवल अधिकृत सुरक्षा अनुसंधान और स्थानीय...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 Жестко заданные учетные данные CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

Rail-OT-Protector

⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner...

CVE-2025-69985

CVE-2025-69985: استغلال لتجاوز المصادقة إلى تنفيذ التعليمات البرمجية عن بُعد RCE في FUXA ≤1.2.8 📌 نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC وتوثيق تقني مفصل حول الثغرة الأمنية CVE-2025-69985 ، التي تؤثر على FUXA الإصدارات ≤1.2.8. تسمح هذه الثغرة لمهاجم غير مصادق بتنفيذ أوامر عشوائية على...

CVE-2025-69985

FUXA ≤ 1.2.8 Authentifizierungsumgehung + Remote-Code-Ausführung CVE-2025-69985 📜 Beschreibung Dieses Python-Exploit zielt auf CVE-2025-69985 ab, eine kritische Sicherheitslücke zur Authentifizierungsumgehung in FUXA webbasierte SCADA/HMI-Software Versionen ≤ 1.2.8. Durch das Senden eines...