Common Vulnerabilities and Exposures
We are committed to securing critical infrastructure and important products, to make a safer world for everyone
Disclaimer: Some information is redacted for safety, please contact us if you require specific details.
What are CVEs?
Common Vulnerabilities and Exposures (CVEs) are publicly disclosed security flaws in software and hardware systems. Each CVE represents a specific vulnerability that could potentially be exploited by malicious actors to compromise systems, data, and networks. The identification and disclosure of CVEs are crucial in the cybersecurity landscape, as they provide a standardised method for sharing information about vulnerabilities across the industry.
Ethical Disclosure
Our approach is designed to minimise risks while maximising digital safety. By proactively contacting companies and relevant authorities, we ensure that vulnerabilities are addressed directly and responsibly.
The Importance of CVEs
The importance of CVEs lies in their role in promoting transparency and awareness in cybersecurity. By informing the public and relevant authorities about existing vulnerabilities, CVEs help prevent undisclosed weaknesses from being exploited, which could lead to severe consequences for individuals, organisations, and critical infrastructure. The timely and responsible disclosure of these vulnerabilities allows for the development and deployment of patches and security measures to mitigate potential risks.
Our Approach
Our approach to uncovering vulnerabilities is multifaceted, combining cutting-edge technologies with expert human insights. By mimicking the methodologies of real-world hackers, we use a combination of drive-by scans and real-world techniques to actively seek out potential security weaknesses. Our strategy integrates manual testing with human intelligence and the advanced capabilities of AI, allowing us to identify and prioritise vulnerabilities that pose the highest risk of exploitation by malicious attackers.
Recognising its critical importance to modern society, we place a strong emphasis on mapping critical infrastructure systems and identifying vulnerabilities in systems exposed to the internet. Once discovered, we follow a strict ethical disclosure process, ensuring that these weaknesses are addressed promptly and securely.
Our Initiative and Commitment
At Samurai Security, we believe in a safer cybersecurity world, driven by honesty and integrity. We undertake the discovery of CVEs as a voluntary, unpaid initiative, because we are committed to making the digital world safer for everyone. Our team is dedicated to identifying vulnerabilities not for profit, but to uphold the highest standards of cybersecurity.
The CVEs listed below are discoveries we have made in the past, demonstrating our commitment to cybersecurity excellence and our proactive role in safeguarding digital environments.
Name of tester:
Momen
Severity:
Critical
Submission body:
Cybersecurity and Infrastructure Security Agency (CISA)
System type:
SCADA
CVE-2023-4485
CVSS v3 9.8
Sistema SCADA Central, a supervisory control and data acquisition (SCADA) system, is designed to monitor and control various industrial processes and critical infrastructure. ARDEREG identified this SCADA system’s login page to be vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application’s SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.
Name of tester:
Momen
Severity:
Critical
Submission body:
Cybersecurity and Infrastructure Security Agency (CISA)
System type:
SCADA
CVE-2023-1934
CVSS v3 9.8
The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulnerability. Present within the hitlogcsv.jsp endpoint, this security flaw permits unauthenticated attackers to engage with the underlying database seamlessly and passively. Consequently, malicious actors could gain access to vital information, such as Industrial Control System (ICS) and OT data, alongside other sensitive records like SMS and SMS Logs. The unauthorized database access exposes compromised systems to potential manipulation or breach of essential infrastructure data, highlighting the severity of this vulnerability.
Name of tester:
Momen
Severity:
Medium
Submission body:
Cybersecurity and Infrastructure Security Agency (CISA)
System type:
OT
CVE-2023-5885
CVSS v3 6.5
The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users. Successful exploitation of this vulnerability could allow an attacker to obtain login credentials for other users.
Name of tester:
Momen
Severity:
High
Submission body:
Cybersecurity and Infrastructure Security Agency (CISA)
System type:
OT
CVE-2022-44037
CVSS v3 8.8
APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights.
CVEs discovered by our team
Our team has discovered and published 24 CVEs. The table lists every CVE where a team member is named on a public record: the CVE record’s credits, a CISA or vendor advisory, or the Exploit-DB or Pastebin proof of concept that the CVE record cites. The researcher behind them is Momen Eldawakhly.
Many of these predate Samurai Security. Eight are credited in the CVE record or a CISA or vendor advisory: seven to Samurai Digital Security, and one (CVE-2022-50926) to a team member at a previous employer, Cypro AB. The other 16 were published by a team member as proof-of-concept author, many of them before joining Samurai.
Latest: CVE-2025-13911, a privilege issue in Inductive Automation Ignition on Windows. Read why Ignition service account privileges must be reviewed.
| CVE ID | Product / vendor | Vulnerability type | Year | Credited to | Proof |
|---|---|---|---|---|---|
| CVE-2025-13911 | Inductive Automation Ignition (Windows) | Execution with unnecessary privileges | 2025 | Samurai Digital Security (co-credited with Ethan Thomason, CedarTech) | Inductive Automation advisory · Our write-up |
| CVE-2024-2882 | SDG Technologies PnPSCADA | Missing authorisation | 2024 | Samurai Digital Security | CISA |
| CVE-2024-2442 | Franklin Fueling Systems EVO 550/5000 | Path traversal | 2024 | Samurai Digital Security | CISA |
| CVE-2023-5885 | Franklin Electric FFS Colibri | Path traversal | 2023 | Samurai Digital Security | CISA |
| CVE-2023-4485 | ARDEREG Sistemas SCADA Central | Unauthenticated blind SQL injection | 2023 | Samurai Digital Security | CISA |
| CVE-2023-27826 | SeowonIntech SWC-5100W (WiMAX) | Authenticated OS command injection | 2023 | Team member (author of the cited proof of concept) | Exploit-DB · Pastebin PoC |
| CVE-2023-1934 | SDG Technologies PnPSCADA | SQL injection | 2023 | Samurai Digital Security | CISA · Exploit-DB |
| CVE-2022-50926 | WAGO 750-8212 PFC200 G2 2ETH RS | Privilege escalation via cookie manipulation | 2022 | Team member, credited at Cypro AB | Exploit-DB |
| CVE-2022-44039 | Franklin Fueling System FFS Colibri | Filesystem overwrite | 2022 | Team member (author of the cited proof of concept) | Pastebin PoC |
| CVE-2022-44037 | APsystems ECU-C Power Control Software | Improper access control | 2022 | Samurai Digital Security | CISA |
| CVE-2022-36642 | Telos Alliance Omnia MPX Node | Local file disclosure | 2022 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2022-35583 | wkhtmltopdf 0.12.6 | Server-side request forgery (SSRF) | 2022 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2022-31886 | Marval MSM | Cross-site request forgery (disable 2FA) | 2022 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2022-31885 | Marval MSM | OS command injection (RCE) | 2022 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2022-30286 | PyScript | Remote Python source code read | 2022 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46419 | Telesquare TLR-2855KS6 | Arbitrary file deletion | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46418 | Telesquare TLR-2855KS6 | Arbitrary file creation | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46417 | Franklin Fueling Systems Colibri | Local file inclusion / path traversal | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46416 | SMA Sunny Tripower 5.0 | Insecure direct object reference (IDOR) | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46387 | Zyxel ZyWALL 2 Plus | Cross-site scripting (XSS) | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-46381 | D-Link DAP-1620 A1 | Directory traversal / local file inclusion | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-45814 | Nettmp NNT 5.1 | SQL injection authentication bypass | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-45425 | SAFARI Montage 8.3/8.5 | Reflected cross-site scripting (XSS) | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
| CVE-2021-45043 | HD-Network Real-time Monitoring System 2.0 | Local file inclusion / directory traversal | 2021 | Team member (author of the cited proof of concept) | Exploit-DB |
Also credited to Samurai Security, with no individual named: CVE-2023-30024 (MagicJack A921 USB, insecure permissions on a hidden NAND partition, 2023). The CVE record cites our post Red Teaming: 0x01 Click RCE via VoIP USB. It is not included in the count above.
Industry Contributions
Our team members have made significant contributions to the security landscape by identifying critical vulnerabilities and improving the resilience of technologies used by some of the world’s leading organisations. Notable companies where individual team members have been involved in security-focused projects include:
Get in touch
Let's find a solution
If you want to chat, give us a call: 0114 400 0021
Or, email us: info@samuraisecurity.co.uk