887 matches found
CVE-2024-21412_Water-Hydra
CVE-2024-21412Water-Hydra Deliver malware via CVE-2024-21412 usage Start the services in order, then access the web server. webserver Start a web server in the folder: python -m http.server Initial Access: Use Windows Advanced Query Syntax AQS to link back to a JPEG trojan hosted on a WebDAV shar...
cip-security-poc
cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...
MSC-EvilTwin-Local-Privilege-Escalation
CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...
Closing the Applied Cybersecurity Gap in Critical Infrastructure: A Cyber-To-Physical Security Assessment Framework for Water Systems
The integration of information technology and operational technology in water infrastructure creates pathways through which cyber compromise may affect physical service delivery. This study revisits the Applied Cybersecurity Gap ACG framework by evaluating an experimental Applied Cybersecurity Ga...
AquaSense-ICS: A Hybrid Real-Simulated Cyber-Physical Dataset and Leakage-Aware Benchmark for Smart Water Quality Monitoring and Attack Detection
Machine-learning research on water cyber-physical systems CPS is constrained by datasets that are either real but chemically poor, or simulated but free of sensing noise and attacks. We present AquaSense-ICS, an open dataset and benchmark that co-registers i a 25.4 h recording window 8.0 h of...
ai.h2o:sparkling-water-core_2.11 (>=3.46.0.1-1-2.3, <=3.46.0.6-1-2.4), ai.h2o:sparkling-water-core_2.12 (>=3.46.0.1-1-3.0, <=3.46.0.6-1-3.5) +599 more potentially affected by CVE-2026-103885 via org.apache.directory.api:api-ldap-model (>=2.1.0, <=2.1.8)
org.apache.directory.api:api-ldap-model MAVEN version =2.1.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =2.0.20, =4.0.2 - com.google.appengine:appengine-local-runtime-jetty12 2.0.23 -...
Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure
Federated learning enables industrial operators to train shared intrusion detection models without disclosing proprietary operational telemetry. However, existing defenses operate strictly in update space, leaving aggregators blind to data poisoning; model updates derived from fabricated telemetr...
Malicious code in key-notify-stack-water-module (npm)
Source: amazon-inspector 87ddef8cbb3df6b03d480fc9b842a397d7dc55f271ce04cedca24e2d5d1065b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dog-water-double-sudo-export (npm)
Source: amazon-inspector 906ddf53c560d51aa1c3e031e98c594086bb6c439d83f948122cda4fc8f6ccd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in delta-tau-analyze-water-info (npm)
The package delta-tau-analyze-water-info was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in compress-water-cluster-slow-cat (npm)
Source: amazon-inspector 562f9b245b30c1699990c7a16e89d8683682dfec4887a6054b862b4e36fb2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cloud-water-old-moon-wind (npm)
Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in bash-water-resolve-unix-error (npm)
Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in avatar-the-way-of-water-online-dkeldez (npm)
The package avatar-the-way-of-water-online-dkeldez was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in avatar-the-way-of-water-free-streaming-djzdk (npm)
The package avatar-the-way-of-water-free-streaming-djzdk was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm)
The package avatar-the-way-of-water-movie-streaming-edjezkd was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in array-simple-water-tau-book (npm)
Source: amazon-inspector 30cc8225a97aed8f4d662ddf94085f9e9c314a50062c44fc92cd45f49a066f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn
Plus: Hackers target over 100 US water systems, ICE puts in an order for robot dogs, and you’ll never guess what “MrChildPorn” was arrested for...
Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)
The package a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc was found to contain malicious code. --- Credit: OpenSSF source...
Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed
Plus: A judge rules cell tower dumps unconstitutional, water utility hacks spread to a dozen states, a phishing email opens a missile-parts supplier’s inbox, and a ransomware boss gets 16 years...