464 matches found
CVE-2026-105987
KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...
CVE-2026-105987
The KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API . The root cause is a lack of input validation, allowing an authenticated attacker to inject arbitrary JavaScript payloads into a stickynote annotation . When other users open the affected document, the browser execute...
EUVD-2026-110926
KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...
CVE-2019-10915
The vulnerability is an authentication bypass in the TIA Administrator server. An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default. By exploiting this vulnerability, an unauthenticated remote attacker could perfo...
TIA Portal project leak
Probes web-exposed Siemens TIA Portal project archives .ap17/.ap18/.zap that may disclose PLC/HMI source projects. !/usr/bin/env python3 -- coding: utf-8 -- import os from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.ics.siemensdefaults import...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products, including SCALANCE, SIMATIC, SINAMICS, SIPROTEC, and TIA Portal. These vulnerabilities pose a threat to malicious actors, who could exploit them to cause the following types of damage: - Denial-of-Service DoS attacks - Data manipulation ...
CVE-2026-25786
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a...
CVE-2026-25786
CVE-2026-25786 affects devices where the web interface’s communication parameters page renders a PLC/station name. The root cause is inadequate validation/sanitization of the name, enabling an authenticated user (who is allowed to download a TIA project) to inject malicious scripts into the page....
CVE-2026-25787: Improper Neutralization of Input During Web Page Generation
Affected devices do not properly validate and sanitize Technology Object TO name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the...
CVE-2025-23365
A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code...
TIA Administrator Cryptographic Signature Code Execution
The vulnerability of the TIA Administrator software-related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
EUVD-2019-2629
Malware in sbrugna...
EUVD-2019-2648
Malware in sbrugna...
EUVD-2018-3484
Malware in sbrugna...
EUVD-2016-8808
Malware in sbrugna...
EUVD-2016-8807
Malware in sbrugna...
EUVD-2014-8389
Malware in sbrugna...
EUVD-2021-23746
Malware in sbrugna...