35 matches found
CVE-2021-31630-OpenPLC-3-Authenticated-RCE
CVE-2021-31630 OpenPLC 3 WebServer Autenticato Esecuzione Remota di Codice. Descrizione La presenza di Command Injection in Open PLC Webserver v3 consente a un attaccante remoto di eseguire codice arbitrario sfruttando il componente "Hardware Layer Code Box" presente nella pagina "/hardware"...
OpenPLC-CVE-2021-31630-RCE
OpenPLC v3 RCE autenticato CVE-2021-31630 Questo è un proof-of-concept moderno compatibile con Python 3.13+ per CVE-2021-31630, una vulnerabilità in OpenPLC v3 che consente a un utente autenticato di caricare un livello hardware personalizzato contenente codice malevolo, portando all'esecuzione...
EUVD-2026-52082
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...
CVE-2026-20492
CVE-2026-20492 describes a race-condition in the Audio HAL that can cause the system to become unresponsive, leading to local denial of service with privileges of the user. Exploitation requires no user interaction, and the attack vector is local. Affected patch references include ALPS10960026 (f...
CVE-2026-20480
Summary (CVE-2026-20480): In Audio HAL, there is a possible out-of-bounds write caused by a heap buffer overflow. This could lead to local denial of service with privileges of the attacker (User) and does not require user interaction to exploit. Affected patch/identifiers: ALPS10960023 (MT6880/68...
EUVD-2026-34802
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 is affected by an authenticated remote code execution vulnerability. An attacker with valid credentials can inject malicious code via the hardware configuration interface by uploading a custom hardware layer containing embedded reverse shell code, which then initiates a network connect...
EUVD-2026-3655
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
PT-2026-3795
Name of the Vulnerable Software and Affected Versions OpenPLC version 3 Description The software contains an authenticated remote code execution issue. An attacker with valid credentials can inject malicious code through the hardware configuration interface. This allows for the upload of a custom...
CVE-2021-31630
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application...
Exploit for Code Injection in Openplcproject Openplc_V3_Firmware
CVE-2021-31630 OpenPLC 3 WebServer Authenticated Remote Code E...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from the disclosure of information in the WLAN HAL when commands are processed through the WMI interface...
Qualcomm Chipsets Input Validation Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...
Qualcomm Chipsets Buffer Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...
PT-2023-21796 · Qualcomm · 315 5G Iot Modem Firmware +203
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HAL when parsing the Rx buffer during the processing of TLV payload. This can potentially lead to...
PT-2023-21795 · Wlan Hal · Wlan Hal
Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. This can potentially lead to unspecified consequences. There is no information provided...
