126 matches found
@grackle-ai/powerline Runs Without Authentication by Default
Impact When --token is not provided and GRACKLEPOWERLINETOKEN is not set, the PowerLine gRPC server runs with zero authentication. A warning is logged "NO AUTH development only" but nothing prevents deployment in this state. Any client that can reach the PowerLine port can spawn agent sessions,...
PT-2026-30400
Impact When --token is not provided and GRACKLE POWERLINE TOKEN is not set, the PowerLine gRPC server runs with zero authentication. A warning is logged "NO AUTH development only" but nothing prevents deployment in this state. Any client that can reach the PowerLine port can spawn agent sessions,...
CVE-2022-33265
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device...
Devolo dLAN 500 AV Wireless+ has security vulnerabilities
Devolo dLAN 500 AV Wireless+ is a powerline communication adapter from Devolo, Germany. A security vulnerability exists in the Devolo dLAN 500 AV Wireless+ version 3.1.0-1 that stems from a lack of proper request validation and could lead to a cross-site request forgery attack...
EUVD-2019-7025
Malware in sbrugna...
EUVD-2025-23787
Malicious code in bioql PyPI...
EUVD-2025-23792
Malicious code in bioql PyPI...
EUVD-2022-36308
Malicious code in bioql PyPI...
EUVD-2022-7172
Malicious code in bioql PyPI...
Qualcomm Embedded Software Buffer Overflow DoS
The vulnerability of microprogramming software in embedded Qualcomm chips relates to the copying of buffers without checking the size of input data when processing certain files in the Powerline Communication firmware. Exploiting this vulnerability can allow a remote attacker to damage memory...
Linux Distros Unpatched Vulnerability : CVE-2022-42906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerline-gitstatus aka Powerline Gitstatus before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes...
PIB files Qualcomm unauthorized access
The vulnerability of PIB files in microprogramming software for embedded Qualcomm chips relates to the disclosure of confidential information through metadata in the Powerline Communication firmware. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to...
CVE-2025-27071
Memory corruption while processing specific files in Powerline Communication Firmware...
CVE-2025-47324
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-47324
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-27071
Memory corruption while processing specific files in Powerline Communication Firmware...
CVE-2025-47324
CVE-2025-47324 is linked to Qualcomm chipset firmware (notably Snapdragon QCA7005 family) and concerns information disclosure when accessing and modifying the PIB file over powerline. The connected documents provide limited technical detail beyond this behavior; no explicit root-cause or concrete...
CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...