Scada-LTS on Natan Maia Morette

CVE-2025-9139: Sensitive User Information Disclosure via WatchListDwr.init.dwr Endpoint

Tue, 19 Aug 2025 00:00:00 -0300

⚠ Replicated advisory. This post reproduces an advisory originally researched and published under the CVE Hunters. It is republished here for reference. The original disclosure followed coordinated vulnerability disclosure and the rules of the CVE Program.

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-9139/
📋 CVE record: CVE-2025-9139

Summary

A vulnerability was identified in the WatchListDwr.init.dwr endpoint of SCADA-LTS that allows any authenticated user, even with minimal permissions, to access sensitive user information including usernames, emails, phone numbers, and admin status. This flaw constitutes an Information Disclosure issue and could be used to facilitate further attacks such as phishing, privilege escalation, or social engineering.

CVE-2025-7728: Cross-Site Scripting (XSS) Stored endpoint users.shtm parameter username

Thu, 17 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7728/
📋 CVE record: CVE-2025-7728

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7728

Summary

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the users.shtm endpoint of the Scada-LTS application. This vulnerability allows attackers to inject malicious scripts into the usernameparameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk.

CVE-2025-7729: Cross-Site Scripting (XSS) Stored endpoint usersProfiles.shtm parameter userprofilename

Thu, 17 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7729/
📋 CVE record: CVE-2025-7729

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7729

Summary

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the usersProfiles.shtm endpoint of the Scada-LTS application. This vulnerability allows attackers to inject malicious scripts into the userprofilenameparameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk.