Lucene search
+L

3547 matches found

Kitploit
Kitploit
added 2026/09/18 2:25 p.m.20 views

CVE-2026-25938-FUXA-Unauthenticated-RCE

CVE-2026-25938 - FUXA Unauthenticated RCE 1. What is FUXA? FUXA is a free, open-source, web-based SCADA Supervisory Control and Data Acquisition and HMI Human-Machine Interface platform used for industrial automation , IoT , and real-time process visualization. It lets users build custom...

9.8CVSS6.4AI score0.00981EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 1:26 p.m.16 views

CVE-2025-69985

FUXA ≤ 1.2.8 Bypass de autenticación + RCE CVE-2025-69985 📜 Descripción Este exploit en Python ataca CVE-2025-69985, una vulnerabilidad crítica de omisión de autenticación en FUXA software SCADA/HMI basado en web versiones ≤ 1.2.8. Al enviar una carga útil JSON manipulada con código Node.js...

9.8CVSS6.3AI score0.05633EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/18 12:03 p.m.12 views

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Escaneo activo y recopilación de información en redes ICS/SCADA utilizando Network Mapper NMAP Turco Este artículo de investigación ya ha sido publicado anteriormente y también puedes encontrar la versión .pdf original en aquí...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/09/18 11:43 a.m.22 views

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

8.8CVSS6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/18 11:43 a.m.19 views

The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

8.4CVSS6.2AI score
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/18 10:46 a.m.502 views

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 10:14 a.m.12 views

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

6AI score
SaveExploits0References81
Kitploit
Kitploit
added 2026/09/18 9:07 a.m.10 views

recon-skills

🛡️ Recon & Pentest Skill Pack 169 offensive security skills for recon and pentest. Field-validated techniques from 600+ company targets across 45+ sectors. Updated with browser fingerprint evasion, anti-bot bypass, hardcoded credential hunting, SCADA/ICS enumeration. 📖 Blog & research: hiago.sh —...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 2:48 a.m.5 views

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

Escritura Arbitraria de Archivos en LAquis SCADA 👨‍💻 Autor Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Exploit de prueba de concepto para CVE-2021-41579 - Escritura arbitraria de archivos mediante un archivo de proyecto .els malicioso en LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Descripción de...

7.8CVSS7.4AI score0.01268EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 8:11 p.m.5 views

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

Credenciales Hardcodeadas de mySCADA myPRO 7 CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as...

9.1CVSS8.1AI score0.15737EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/17 6:35 p.m.9 views

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 permite la ejecución remota de código cuando el atacante tiene privilegios de administrador escribiendo un script malicioso en C y ejecutándolo en el servidor a través de la configuración del servidor en el panel de control del administrador en el puerto 8101...

7.2CVSS7.5AI score0.02106EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 2:10 p.m.10 views

SCADAShutdownTool

SCADA Shutdown Tool Herramienta de pruebas de seguridad SCADA SCADAShutdownTool es una herramienta de automatización y prueba para sistemas de control industrial que permite a investigadores y expertos en seguridad probar sistemas de seguridad SCADA, enumerar controladores esclavos, leer los...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:43 a.m.8 views

CVE-2025-69985

CVE-2025-69985: Exploit para Autenticación Bypass a RCE en FUXA ≤1.2.8 📌 Descripción General Este repositorio contiene una Prueba de Concepto PoC y documentación técnica detallada sobre la vulnerabilidad CVE-2025-69985 , que afecta a FUXA versiones ≤1.2.8. La vulnerabilidad permite a un atacante ...

9.8CVSS6.6AI score0.05633EPSS
SaveExploits7References1
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.24 views

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

7.5CVSS5.7AI score0.01403EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.62 views

Nordex NC2 - Cross-Site Scripting

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...

6.1CVSS6AI score0.12042EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.45 views

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

5.3CVSS7.5AI score0.09512EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.49 views

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A system software information disclosure exists due to lack of authentication for /html/device-id. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16671 info: name:...

5.3CVSS6.6AI score0.08851EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.48 views

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

5.3CVSS6.6AI score0.24568EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.66 views

CirCarLife Scada <4.3 - System Log Exposure

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. id: CVE-2018-12634 info: name: CirCarLife Scada 4.3 - System Log...

9.8CVSS8.2AI score0.56401EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/16 4:19 p.m.8 views

Rail-OT-Protector

⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder