CISA: Introduction to Chemical Security at CISA

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: International Chemical Security Framework

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: 2023 ISC Annual Review

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Chemical Sector Security Awareness Training

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: 2020 Edition - Facility Access Control: an Interagency Security Committee Best Practice

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Protecting Patrons in Outdoor Eating Venues Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Chemical Facility Anti-Terrorism Standards (CFATS) Cyber and Physical Security Best Practices

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Bomb-Making Materials Awareness Program (BMAP) Overview

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Mitigating Attacks on Houses of Worship Security Guide - Spanish Translation

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: SRG Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: DHS OSAI-OBP Partnership Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Security and Resiliency Guide

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Occupant Emergency Programs: an Interagency Security Committee Guide – 2024 Edition

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: CFATS Personnel Surety Program Demonstration and Lessons Learned

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Security and Resiliency Guide - Healthcare and Public Health Facility Annex

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: NETF Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Protecting Infrastructure during Public Demonstrations Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Incentivizing Facility Security: a Nonregulatory Approach

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Cyber and Physical Security in Manufacturing Environments

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Preparing for a Chemical Facility Anti-Terrorism Standards (CFATS) Inspection

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Building an International Network of Chemical Security Practitioners

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: 2021 ISC Annual Review

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: FEMA Chemical, Biological, Radiological, and Nuclear (CBRN) Response and Recovery Efforts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Emergency Response Planning Guidelines

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: STS Threat Timelines Facilitator Guide

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Federal Emergency Management Agency (FEMA) Response: Hurricanes, Wildfires, Floods, and Pandemics

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Chemical Sector 101

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: IST Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: TRIPwire Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Chemical Security Analysis Center (CSAC) Overview

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Office for Bombing Prevention (OBP) Overview

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Bomb Threat Checklist

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: BMAP Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: What to Expect during a Chemical Facility Anti-Terrorism Standards (CFATS) Inspection

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Acronis Cyber Protect/Backup Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Acronis Cyber Protect/Backup remote code execution', 'Description' = %q Acronis Cyber Protect or Backup is an enterprise backup/recovery solution...

Asterisk AMI Originate Authenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Asterisk AMI Originate Authenticated RCE', 'Description' = %q On Asterisk, prior to versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk...

Fortinet FortiManager Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet FortiManager Unauthenticated RCE', 'Description' = %q This module exploits a missing authentication vulnerability affecting FortiManager...

ABB Cylon Aspect 3.08.01 diagLateThread.php Information Disclosure

ABB Cylon Aspect 3.08.01 diagLateThread.php Information Disclosure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management...

Intelligent Security System SecurOS Enterprise 11 Unquoted Service Path

Exploit Title: Intelligent Security System SecurOS Enterprise v11 - Unquoted Service Path Date: 2024-11-25 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] t.me/Ci3c0 Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vend...

Laravel 11.0 Cross Site Scripting

/! - VULNERABILITY: Cross Site Scripting Laravel version 11.0 - Authenticated Persistent XSS - GOOGLE DORK: inurl:.com/?q= - GOOGLE DORK: Site:.com/?q= - DATE: 2024-12-01 - SECURITY RESEARCHER: E1.Coders - VENDOR: LARAVEL https://laravel.com/ - SOFTWARE LINK:...

Simple Chat System 1.0 Cross Site Scripting

Exploit Title:Simple Chat System 1.0 Reflected XSS Date:05/12/2024 Exploit Author:Merve Hatice Arslan Vendor Homepage:https://code-projects.org/simple-chat-system/ Sofware Link:https://download.code-projects.org/details/ec6340ea-ef68-48d9-b9b2-da397f52b2dc Version:1.0 Tested on:Linux / XAMPP...

Nvidia GeForce 11.0.1.163 Unquoted Service Path

Exploit Title: Nvidia GeForce v11.0.1.163 - Unquoted Service Path Date: 2024-11-25 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] t.me/Ci3c0 Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vendor Homepage:...

ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure

ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management and...

Omada Identity Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stored Cross-Site Scripting product: Omada Identity vulnerable version: v15U1, v14.14 hotfix 309 fixed version: v15U1, v14.14 hotfix 309 CVE number: CVE-2024-52951 impact...

Russian FSB Cross Site Scripting

/! - VULNERABILITY: Cross Site Scripting Federal Security Service of the Russian Federation - Authenticated Persistent XSS - GOOGLE DORK: inurl:fsb.ru/fsb/sh.htm?query= - DATE: 2024-11-29 - SECURITY RESEARCHER: E1.Coders - VENDOR: FSB http://www.fsb.ru/ - SOFTWARE LINK: http://www.fsb.ru/ - CVSS:...

ABB Cylon Aspect 3.08.00 fileSystemUpdate.php File Upload / Denial Of Service

ABB Cylon Aspect 3.08.00 fileSystemUpdate.php Insecure File Upload Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy management...

Siemens Unlocked JTAG Interface / Buffer Overflow

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unlocked JTAG interface and buffer overflow product: Siemens SM-2558 Protocol Element extension module for Siemens SICAM AK3/TM/BC, Siemens CP-2016 & CP-2019 vulnerable...

Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control

Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control Vendor: The Akuvox Company Product web page: https://www.akuvox.com Affected version: Doorphone: S539 S532 X916 X915 X912 R29 Intercom: E16C R20K-2 R20A-2 C313W-2 NS-2 NC-2 NX-2 Firmware: 912.30.1.137 Summary: Vandal-resistan...

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Config Download Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...

fronsetia 1.1 Cross Site Scripting

Exploit Title: Reflected XSS - fronsetiav1.1 Date: 11/2024 Exploit Author: Andrey Stoykov Version: 1.1 Tested on: Debian 12 Blog: https://msecureltd.blogspot.com/2024/11/friday-fun-pentest-series-14-reflected.html Reflected XSS 1 - "showoperations.jsp" Steps to Reproduce: 1. Visit main page of th...