OpenPLC 安全漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A security vulnerability exists in OpenPLC V3 that stems from a flaw in the ModbusTCP server functionality that could lead ...

OpenPLC OpenPLC_v3 ModbusTCP server denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2223 OpenPLC OpenPLCv3 ModbusTCP server denial of service vulnerability October 7, 2025 CVE Number CVE-2025-53476 SUMMARY A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A...

PT-2025-40999

Name of the Vulnerable Software and Affected Versions OpenPLC version v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58 Description A denial of service issue exists in the ModbusTCP server functionality. An attacker can open a series of TCP connections to exhaust the server and prevent it from processi...

EUVD-2022-39937

Malicious code in bioql PyPI...

EUVD-2023-29559

Malicious code in bioql PyPI...

EUVD-2021-9921

Malicious code in bioql PyPI...

EUVD-2025-26324

Malicious code in bioql PyPI...

EUVD-2021-8007

Malicious code in bioql PyPI...

EUVD-2025-18993

Malicious code in bioql PyPI...

EUVD-2022-34371

Malicious code in bioql PyPI...

EUVD-2022-33055

Malicious code in bioql PyPI...

EUVD-2021-8010

Malicious code in bioql PyPI...

EUVD-2023-12132

Malicious code in bioql PyPI...

EUVD-2023-23551

Malicious code in bioql PyPI...

EUVD-2024-39189

Malicious code in bioql PyPI...

MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols

Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...

CVE-2025-7405

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...

CVE-2025-7405

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...

CVE-2025-7405 Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...

CVE-2025-7405

CVE-2025-7405 concerns Mitsubishi Electric MELSEC iQ-F Series CPU module with missing authentication for the MODBUS/TCP function, enabling remote, unauthenticated reads/writes of device values and potential disruption of program operation. Affected product is MELSEC iQ-F Series CPU module; root c...