EaST Framework

Exploits and Security Tools Framework. #0day, #Exploits, #SCADA, #Vulnerability, #Vulnerabilities, #Security, #CVE, #Pentest

[EaST Framework @EAST_framework]

Announce: east framework has been rewritten to python3 version! New exploits available soon

[EaST Framework @EAST_framework]

EFA updates (+3 sploits):
- WP FileManager Arbitrary File Upload, Arbitrary File Remove. public
- MedWebTux SQL Injection and Auth Bypass. old 0Day

[EaST Framework @EAST_framework]

EFA updates (+ 6) - DentiMax Command Execution. old 0Day
- CiMe (Citas Medicas) Blind Time-Based SQLi. old 0Day
- Domoticz 4.9700 SQL Injection/XSS, Arbitrary File Upload/Remote Code Execution. old 0Days
- OpenMedis SQL injection. old 0Day

[EaST Framework @EAST_framework]

EFA updates for several months( +8 sploits):
- KwaMoja XML-RPC Time-Based blind SQLi. old 0Day of ours
- KKMserver 2.1.26.16 XSS, XSS2, DoS, DirTrav, Infoleak
- iMedDoc SQL injection. old 0Day
- GCO Smile Odonto Time-Based Blind SQL injection. old 0Day

[EaST Framework @EAST_framework]

EFS updates (+6 sploits)
- Homegenie 1.3: Arbitrary File Uploads, RCE, DirTravs, infoleaks.
- Iobroker 1.4.2 Arbitrary File Upload

[EaST Framework @EAST_framework]

Latest EFS updates during last months (+10 sploits):
- Iobroker 1.4.2: Command Injection, two Directory Traversals
- Scada LTS 1.1 : SQL Injection, XSS, info leak
- FHEM 5.9 Arbitrary File Upload/Remote Code Execution,
Directory Traversals, another RCE

[EaST Framework @EAST_framework]

1.42 updates with
- Inductive Automation 7.6.4 Designer app XXE
- ICPDAS eLogger Arbitrary File Upload
- ESA-Automation Crew Webserver Info Disclosure
- AutomationDirect Do-more Designer 2 exploits
- 2 exploits for Advantech WebAccess Node 8.3.2

[EaST Framework @EAST_framework]

1.41 updates with 4 0Days:
- Delta Industrial Automation Robot DRA Studio Arbitrary File Upload + Arbitrary File Disclosure
- BLUE Open Studio 8.0 RCE
- Atvise 3.2.1 Info Disclosure

[EaST Framework @EAST_framework]

1.40 updates with 3 0Days:
- Atvise 3.2.1 Arbitrary File Upload
- Atvise 3.2.1 Arbitrary File Disclosure
- SCADA ViSA 7.6.132 project infection
- OpenSource ERP Arbitrary SQL query execution. public
- CyBroHttpServer Directory Traveral. public

[EaST Framework @EAST_framework]

1.39 ver ICS five 0Days :
- ScadaBR 1.0 CE Remote Command Execution
- OSHMI remote shutdown
- OpenAPC BeamServer DoS
- LSIS XP-Manager DoS
- LSIS XP-Manager Arbitrary File Upload RCE

[EaST Framework @EAST_framework]

EF-SCADA 1.42 2 0Days for SOCOMEC + 4 public:
Adobe ColdFusion 2018 Remote Code Execution.
blueimp.
Socomec UPS systems 0Days: RCE + info_disclosure
nelson IT ERP SQLi. CVE-2019-5893
navigate cms RCE

[EaST Framework @EAST_framework]

EF-SCADA 1.41 5 [0Days] + 1 public.
IceHRM Privilege Escalation, info_disclosure
eBrigade ERP 4.5 error-based SQL injection. EDB 46117
Dragon Medical Practice Code Execution
OpenEMR v5.0.0 - Directory Traversal
Online Clinic sqli

[EaST Framework @EAST_framework]

EF-SCADA 1.40 featured public vulns for: D-LINK DI634M Router, TP-Link Technologies TL-WA850RE, ClinicOffice management software two 0days

[EaST Framework @EAST_framework]

EF-SCADA 1.39: 3 0Days + public! for
RoxyFileman, Snowman decompiler, Vstarcam camera,
, Traq 3.7.1 SQLi, Pro-face GP-Pro EX HMI

[EaST Framework @EAST_framework]

1.38 EF-SCADA
ATGCLabs software - 5 ! 0Days including SQLis, files upload and priv escal.
efa_ATGCLabs_Freezer_Web_Acceess_HQLi - ATGCLabs Freezer Web Acceess HQLi 0-day
OpenMRS software - Information Disclosure and remote apps management

[EaST Framework @EAST_framework]

Failed to automatically post update-images here... so will be posting in text format from now...

[EaST Framework @EAST_framework]

#ICS #SCADA
New EF-SCADA PACK is out with 7 #0day's

[EaST Framework @EAST_framework]

#exploits
#EFARMO 1.37 is out with 7 #0day's

[EaST Framework @EAST_framework]

#ICS #SCADA #HMI
Latest EF-SCADA update. 13 #0day`s

[EaST Framework @EAST_framework]

Latest EF-ARMO update. 18 #0day`s and publics