cve-2021-31630

このスクリプトは、OpenPLC Web Server v3 の脆弱性を自動的に悪用します。 サーバーに対して手動テクニックを使わずに、自動でリバースシェルを作成できます。 CVE-2021-31630 の詳細 Open PLC Webserver v3 のコマンドインジェクションにより、リモートの攻撃者がアプリケーションの「/hardware」ページにある「Hardware Layer Code Box」コンポーネントを介して任意のコードを実行できます。 このスクリプトは、OpenPLC...

MINI-HW79-8WHX-RMMJ

Bulletin has no description...

MINI-P84P-W95P-WVCQ

Bulletin has no description...

MINI-HWQM-8G8X-CH6H

Bulletin has no description...

CGA-HW73-V752-243R

Bulletin has no description...

MINI-H88Q-J29R-6R6R

Bulletin has no description...

MINI-HW4P-H62H-76PF

Bulletin has no description...

MINI-HWVP-XJ3Q-VVFJ

Bulletin has no description...

MINI-H34C-9XF8-PPM7

Bulletin has no description...

MINI-J3VR-HWCR-X86Q

Bulletin has no description...

HardSecBench: Benchmarking the Security Awareness of LLMs for Hardware Code Generation

Large language models LLMs are being increasingly integrated into practical hardware and firmware development pipelines for code generation. Existing studies have primarily focused on evaluating the functional correctness of LLM-generated code, yet paid limited attention to its security issues...

OpenPLC 代码注入漏洞

OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. A code injection vulnerability exists in OpenPLC v3, which originates from the failure of the Hardware Layer Code Box component of the /hardware page of the product's...