CVE-2021-26828-Ultimate

ScadaFlare - Toolkit di sfruttamento RCE autenticato CVE-2021-26828 Un exploit RCE modulare post-autenticazione che prende di mira ScadaBR 1.1.0, potenziato per le operazioni red team. Funzionalità Carica shell .jsp armate tramite viewedit.shtm Supporta payload Linux e Windows Supporto proxy SOCK...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Aktives Scannen und Informationssammlung in ICS/SCADA-Netzwerken mit Network Mapper NMAP Türkisch Diese Forschungsarbeit wurde bereits zuvor veröffentlicht; Sie können die Original-PDF-Version auch hier finden...

Advisories

Sicherheitshinweise Dieses Repository enthält mehrere Schwachstellen, die während Penetrationstests entdeckt und gemeldet wurden. Der gesamte Inhalt dieses Repositorys dient ausschließlich zu Bildungszwecken. Links...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Scrittura Arbitraria di File 👨‍💻 Autore Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Exploit proof-of-concept per CVE-2021-41579 - Scrittura arbitraria di file tramite file di progetto .els malevolo in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Descrizione della vulnerabilità...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Autore Mohammed Idrees Banyamer Ricercatore di Sicurezza 📌 Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2026-25939 , una vulnerabilità critica di bypass dell'autorizzazione in FUXA software SCADA/ICS open-source. La vulnerabilità consente ad attaccanti remoti no...

CVE-2025-69985

CVE-2025-69985: استغلال لتجاوز المصادقة إلى تنفيذ التعليمات البرمجية عن بُعد RCE في FUXA ≤1.2.8 📌 نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC وتوثيق تقني مفصل حول الثغرة الأمنية CVE-2025-69985 ، التي تؤثر على FUXA الإصدارات ≤1.2.8. تسمح هذه الثغرة لمهاجم غير مصادق بتنفيذ أوامر عشوائية على...

recon-skills

🛡️ Pacchetto di Competenze per Recon & Pentest 169 competenze di sicurezza offensiva per recon e pentest. Tecniche validate sul campo da 600+ aziende target in 45+ settori. Aggiornato con elusione delle impronte digitali del browser, bypass anti-bot, caccia a credenziali hardcoded, enumerazione...

SCADAShutdownTool

SCADA Shutdown Tool SCADA Security Testing tool SCADAShutdownTool is an industrial control system automation and testing tool allows security researchers and experts to test SCADA security systems, enumerate slave controllers, read controller's registers values and rewrite registers data...

POC-CVE-2012-1831

POC-CVE-2012-1831 Prova di concetto per CVE-2012-1831 Kingview Touchview 6.53 Contesto su Kingview KingView® è un potente software SCADA industriale basato su Windows per il monitoraggio e il controllo dei processi industriali. Con oltre 25 anni di sviluppo, è ora noto per essere il software di...

ICS-TestBed-Framework

ICS TestBed Framework Es wird ein skalierbares Framework vorgeschlagen, das automatisch eine Anzahl virtueller Maschinen lokal oder remote bereitstellt, die ein Supervisory Control And Data Acquisition SCADA-Netzwerk nachbilden. Dazu gehören mehrere virtuelle Hosts, die Sensoren und Aktuatoren...

smod

smod smod è un framework modulare con ogni tipo di funzionalità diagnostica e offensiva di cui potresti aver bisogno per il pentest del protocollo modbus. È un'implementazione completa del protocollo Modbus che utilizza Python e Scapy. Questo software può essere eseguito su Linux/OSX con python...

CVE-2026-67442

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.3, DELETE /api/roles removes role definitions through server/runtime/users/usrstorage.js but does not remove the deleted role identifier from each user's info.roles array or the runtime usersMap cache. If a...

CVE-2026-67440

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...

CVE-2026-67443

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is tru...

CVE-2026-65985

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

CVE-2026-65984

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, POST /api/refresh in server/api/auth/index.js falls back from current user data to decoded.groups, including when the user is deleted or groups is zero, and POST /api/heartbeat in server/api/index.js...

CVE-2026-47721

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not consistently enforce authJwt.haveAdminPermission for scheduler settings. An authenticated non-admin operator can create or...

CVE-2026-47720

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...

CVE-2026-47719

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the DEVICEWEBAPIREQUEST and DEVICEPROPERTY Socket.IO handlers in server/runtime/index.js omit isSocketWriteAuthorized and accept attacker-controlled property.address or endpoint connection data. A remote...

CVE-2026-67442

FUXA (web-based SCADA/HMI/Dashboard) prior to 1.3.3 has a business-logic flaw in the DELETE /api/roles endpoint. When a role is deleted, the role identifier is not removed from each user's info.roles array or the runtime usersMap cache. If a permission configuration still references that identifi...