37 matches found
OpenPLC-CVE-2021-31630-RCE
OpenPLC v3 Аутентифицированное RCE CVE-2021-31630 Это современный эксплойт Proof-of-Concept, совместимый с Python 3.13+, для CVE-2021-31630 — уязвимости в OpenPLC v3, которая позволяет аутентифицированному пользователю загрузить собственный аппаратный слой, содержащий вредоносный код, что приводи...
CVE-2021-31630-OpenPLC-3-Authenticated-RCE
CVE-2021-31630 OpenPLC 3 WebServer: аутентифицированное удаленное выполнение кода. Описание Наличие внедрения команд Command Injection в Open PLC Webserver v3 позволяет удаленным злоумышленникам выполнять произвольный код, используя компонент «Hardware Layer Code Box», расположенный на странице...
EUVD-2026-52082
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...
CVE-2026-20492
A race condition in the Audio HAL component can cause a system to become unresponsive, leading to a local denial of service . Exploitation requires User execution privileges , but no user interaction is required. The vulnerability affects specific hardware, with remediation provided via Patch ID ...
CVE-2026-20480
A heap buffer overflow in the Audio HAL component allows for a possible out of bounds write . This vulnerability can lead to a local denial of service and requires User execution privileges to exploit, though no user interaction is necessary. Affected hardware includes models MT6880, MT6890, MT69...
PT-2026-67168
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...
EUVD-2026-34802
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 is affected by an authenticated remote code execution vulnerability. An attacker with valid credentials can inject malicious code via the hardware configuration interface by uploading a custom hardware layer containing embedded reverse shell code, which then initiates a network connect...
EUVD-2026-3655
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
CVE-2021-47770
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...
PT-2026-3795
Name of the Vulnerable Software and Affected Versions OpenPLC version 3 Description The software contains an authenticated remote code execution issue. An attacker with valid credentials can inject malicious code through the hardware configuration interface. This allows for the upload of a custom...
CVE-2021-31630
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application...
Exploit for Code Injection in Openplcproject Openplc_V3_Firmware
CVE-2021-31630 OpenPLC 3 WebServer Authenticated Remote Code E...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from the disclosure of information in the WLAN HAL when commands are processed through the WMI interface...
Qualcomm Chipsets Input Validation Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...
Qualcomm Chipsets Buffer Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...
PT-2023-21796 · Qualcomm · 315 5G Iot Modem Firmware +203
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HAL when parsing the Rx buffer during the processing of TLV payload. This can potentially lead to...
PT-2023-21795 · Wlan Hal · Wlan Hal
Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. This can potentially lead to unspecified consequences. There is no information provided...