3468 matches found
Rockwell Automation MicroLogix 1100 PLC Web Server Detection
Binary data scadarockwellmicrologix1100plcwebserverdetect.nbin...
Siemens SIMATIC ProSave Detection
Binary data scadaappsiemenssimaticprosavedetect.nbin...
Siemens SIMATIC ProSave < 1300.100.2201.15 Untrusted Path Arbitrary Code Execution (SSA-451236)
Binary data scadasiemenssimaticprosaveSSA-451236.nbin...
IBC Solar ServeMaster Source Code Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified three vulnerabilities in IBC Solar products. The vulnerabilities are disclosure of applications source code, plain text passwords, and cross site scripting. IBC Solar has not produced a patch to mitigate these vulnerabilities. These...
SA98 : OpenSSL Security Advisory 11-June-2015
SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, 1.0.0, and 0.9.8 are vulnerable to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to cause a denial of service, memory corruption, application crash, or downgrade in the Diffie-Hellman...
Inductive Automation Ignition Detection
Binary data scadaappinductiveautomationignitiondetect.nbin...
Eisbar SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability
Document Title: =============== Eisbar SCADA All Versions - iOS, Android & W8 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID:...
ESC 8832 Data Controller Session Hijacking
=begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC 8832 Data Controller Hardware CVE : N/A Yet POC for...
ESC 8832 Data Controller - Multiple Vulnerabilities
ESC 8832 Data Controller - Multiple Vulnerabilities =begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC...
Eisbar SCADA Script Insertion
Document Title: =============== Eisbär SCADA All Versions - iOS, Android & W8 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID:...
Eisbär SCADA (All Versions) - Persistent UI Vulnerability
Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...
Eisbär SCADA (All Versions) - Persistent UI Vulnerability
Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...
Rockwell Automation RSLinx Classic < 3.73.00 Buffer Overflow
Binary data scadarslinxclassic37300.nbin...
The Triumphant Finale of CSI: Cyber
It’s been a couple of months since we left our heroes on CSI: Cyber, and boy, have they been busy. They have apparently solved many crimes using cyber-sleuthing, acquired some decidedly non-cyber firearms skills, and, in the case of our man Krumitz, taken up running. We wanted to check in and see...
EtherNet/IP CIP Device Identification
Binary data scadaciplistidentity.nbin...
EtherNet/IP CIP List of Active Object Classes
Binary data scadacipclasslist.nbin...
Open Smart Grid Protocol Homegrown Crypto Weaknesses
In the three years since its inception, the Open Smart Grid Protocol has found its way into more than four million smart meters and similar devices worldwide. And like its SCADA, industrial control system, and embedded system brethren, it’s rife with security issues. Two researchers, Phillip...
Honeywell XLWEB SCADA Path Traversal
SCADA - EXPLOITING CVE-2015-0984 FOR SHELL ACCESS This post is a follow up detailing how to achieve control of the actual XLWEB SCADA controller. The vulnerability is assigned with reference CVE-2015-0984. Rather than the application level administrative access as discussed in the email regarding...
Dell Threat Report Claims 100 Percent Increase in SCADA Attacks
In 2014, there were increases in malware designed to target retail point-of-sale systems and attack supervisory control and data acquisition SCADA systems, according to Dell’s annual threat report. The report pdf was released, interestingly enough, just one day before Verizon’s industry standard...
Elipse SCADA DLL Hijacking Vulnerability
Elipse SCADA is a WEB-based SCADA system deployed in critical manufacturing, energy, hydro and other systems. The program suffers from a DLL hijacking vulnerability when loading a DLL pointing to a DLL named wfapi.dll, which could be exploited by an attacker to build a malicious application that,...