OpenPLC_v3

OpenPLC Runtime versione 3 ⚠️ Questo progetto ha raggiunto la fine del ciclo di vita e non è più mantenuto. È stato sostituito da OpenPLC Runtime v4. Visita il nuovo repository per istruzioni di installazione, documentazione e supporto. OpenPLC è un controllore logico programmabile open-source...

OpenPLC_v3

OpenPLC Runtime version 3 Einführung OpenPLC ist eine quelloffene, softwarebasierte, benutzerfreundliche speicherprogrammierbare Steuerung. Unser Fokus liegt auf der Bereitstellung einer kostengünstigen industriellen Lösung für Automatisierung und Forschung. OpenPLC wurde in vielen...

CVE-2025-54962

🔥 CVE-2025-54962 — Upload di file non sicuro nel webserver OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — XSS persistente, CSRF 📌 Riepilogo Ho scoperto una vulnerabilità nel webserver OpenPLC Runtime versione rilasciata: 2024-12-31 che consente agli utenti autenticati di caricare file arbitrari a...

CVE-2025-34226

CVE-2025-34226: DoS persistente nel runtime OpenPLC Panoramica della vulnerabilità...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71268

OpenPLC Runtime v3 is affected by a path traversal in compile_program() (webserver/openplc.py): it processes directives of the form (FILE:path content ) and writes to os.path.join('./core', file_path) without validating that file_path stays under ./core. A crafted ST file like (FILE:../../../etc/...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71268 OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-14480

OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attacker‑supplied filename progfile directly into the Programs.File database field and later uses this value as the destination path for an...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller developed by Thiago Alves. There is a security vulnerability in OpenPLC Runtime version 3, which stems from the use of unsafe default values during resource initialization. This vulnerability could allow attackers to access the system...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller developed by Thiago Alves. There is a security vulnerability in OpenPLC Runtime version 3. This vulnerability stems from the REST API endpoints only checking the existence of JWTs without verifying the caller’s role. This could allow...

OpenPLC Runtime version 3 跨站请求伪造漏洞

OpenPLC Runtime version 3 is a programmable logic controller by the individual developer Thiago Alves. OpenPLC Runtime version 3 suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF authentication, which could lead to a cross-site request forgery attack...

EUVD-2021-26682

Malware in sbrugna...

EUVD-2024-36331

Malicious code in bioql PyPI...

EUVD-2024-38110

Malicious code in bioql PyPI...

EUVD-2024-38109

Malicious code in bioql PyPI...

CVE-2025-34226

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-34226 OpenPLC Runtime v3 Persistent DoS

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-34226

OpenPLC Runtime v3 is affected by an input validation flaw in the /upload-program-action endpoint: the epoch_time parameter submitted during program uploads is not validated, allowing corruption of the programs database. After a malformed upload, the runtime can operate, but on restart the databa...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller by Thiago Alves Individual Developer. A security vulnerability exists in OpenPLC Runtime version 3, which stems from insufficient input validation of the epochtime field, which could lead to program database corruption, resulting in a...