11474 matches found
ICSSecurityScripts
ICSSecurityScripts 産業セキュリティスクリプト Beckhoff-CX9020-WebControl.py: Beckhoff CX9020 Windows CE PLC の制御 FullBeckhoffScan.py: Beckhoff PLC のスキャンおよびハッキングを行う本格的なスクリプト PhoenixControlPLC-ILC150.py: CPUステータスを表示して元に戻す。ILC150でテスト済み・動作確認済み（他の機種では少なくとも部分的に動作） PhoenixControlPLC-ILC390.py:...
fluffi
FLUFFI FLUFFI - 침투 테스터를 위한 분산 진화 이진 퍼저. 프로젝트 정보 개괄적 개요 초보자 튜토리얼 시작하기 사용법 HOWTO 기술 세부 사항 FLUFFI에 기여하기 라이선스 발견된 버그 지금까지 FLUFFI는 거의 전적으로 SIEMENS 제품 및 솔루션에 사용되었습니다. 거기서 발견된 버그는 공개되지 않습니다. 그러나 FLUFFI는 다음과 같은 공개된 버그를 발견했습니다 이 목록을 최신 상태로 유지하는 데 도움을 주세요: bcshiftaddsub의 버퍼 언더플로CVE-2019-11046...
fluffi
FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...
SINEMA Remote Connect Server < V2.0 - Open Redirect
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks. id: CVE-2022-23102...
Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting
A cross-site scripting vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2014-2908 info: name: Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting author:...
CVE-2015-5374-DoS-PoC
CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module このモジュールは、Port 50000/UDP...
APOLOGEE
🌀 APOLOGEE - 지멘스Siemens 현장 패널 스캐너: APOLOGEE는 Siemens APOGEE PXC BACnet 자동화 컨트롤러V3.5 이전 모든 버전와 TALON TC BACnet 자동화 컨트롤러V3.5 이전 모든 버전에서 숨겨진 디렉터리를 열거하는 Python 스크립트이자 Metasploit 모듈입니다. CVSS 점수 7.5를 가진 이 익스플로잇을 사용하면 공격자가 대체 경로 또는 채널을 사용하여 인증을 우회하고 웹 서버의 숨겨진 디렉터리에 액세스할 수 있습니다. 이 리포지토리는 CVE-2017-9947을...
CVE-2026-41551
CVE-2026-41551 复现 漏洞：Siemens ROS fileserver / fileserver2 服务相对路径遍历 CVSS v3.1：9.1 （AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N） 影响版本：ros-sharp 所有 name.substr10; // 去掉 "package://" std::string package = address.substr0, address.find"/"; std::string filepath = address.substrpackage.length;...
Stuxnet
Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010...
Siemens Teamcenter 2412.x < 2412.0013 / 2506.x < 2506.0010 / 2512.x < 2512.2607 / 2606.x < 2606.2607 XSS (SSA-157465)
The version of Siemens Teamcenter installed on the remote host is 2412.x prior to 2412.0013, or 2506.x prior to 2506.0010, or 2512.x prior to 2512.2607, or 2606.x prior to 2606.2607. It is, therefore, affected by a reflected cross-site scripting vulnerability. Affected applications do not properl...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...
Siemens Siveillance Control
SUMMARY A vulnerability has been identified in the Open Interface Services OIS web module affecting Siveillance Control and Siveillance Control Pro versions OIS 3.x.y and OIS 4.x.y . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access...
Siemens Industrial Edge Management
SUMMARY Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens has released new versions for the affected products...
Siemens Desigo CC family
SUMMARY A Client Code Execution CCE vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that...
Siemens SIMOVE Fleetmanager and SIPLANT
SUMMARY SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a...
Siemens SIPLUS and SIMATIC Products
SUMMARY Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where...
Siemens Teamcenter
SUMMARY A reflected cross site scripting vulnerability in the authentication redirect flow /auth/ of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Lo...
Siemens Mendix SAML
SUMMARY Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...