OpenPLC_v3

OpenPLC 런타임 버전 3 ⚠️ 이 프로젝트는 수명 종료End of Life 상태이며 더 이상 유지 관리되지 않습니다. OpenPLC Runtime v4로 대체되었습니다. 설치 지침, 문서 및 지원을 위해 새 저장소를 방문하십시오. OpenPLC는 사용하기 쉬운 소프트웨어를 기반으로 하는 오픈소스 프로그래밍 가능한 논리 제어기입니다. 우리의 초점은 자동화와 연구를 위한 저비용 산업용 솔루션을 제공하는 것입니다. OpenPLC는 전체 소스 코드를 제공하는 유일한 컨트롤러이기 때문에 산업 사이버 보안 연구를 위한 프레임워크로 많...

OpenPLC_v3

OpenPLC Runtime version 3 Introduction OpenPLC est un automate logique programmable open source basé sur un logiciel facile à utiliser. Notre objectif est de fournir une solution industrielle à faible coût pour l'automatisation et la recherche. OpenPLC a été utilisé dans de nombreux articles de...

CVE-2025-54962

🔥 CVE-2025-54962 — Upload di file non sicuro nel webserver OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — XSS persistente, CSRF 📌 Riepilogo Ho scoperto una vulnerabilità nel webserver OpenPLC Runtime versione rilasciata: 2024-12-31 che consente agli utenti autenticati di caricare file arbitrari a...

CVE-2025-34226

CVE-2025-34226: DoS persistente nel runtime OpenPLC Panoramica della vulnerabilità...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71268

OpenPLC Runtime v3 is affected by a path traversal in compile_program() (webserver/openplc.py): it processes directives of the form (FILE:path content ) and writes to os.path.join('./core', file_path) without validating that file_path stays under ./core. A crafted ST file like (FILE:../../../etc/...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71268 OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-14480

OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attacker‑supplied filename progfile directly into the Programs.File database field and later uses this value as the destination path for an...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller developed by Thiago Alves. There is a security vulnerability in OpenPLC Runtime version 3, which stems from the use of unsafe default values during resource initialization. This vulnerability could allow attackers to access the system...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller developed by Thiago Alves. There is a security vulnerability in OpenPLC Runtime version 3. This vulnerability stems from the REST API endpoints only checking the existence of JWTs without verifying the caller’s role. This could allow...

OpenPLC Runtime version 3 跨站请求伪造漏洞

OpenPLC Runtime version 3 is a programmable logic controller by the individual developer Thiago Alves. OpenPLC Runtime version 3 suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF authentication, which could lead to a cross-site request forgery attack...

EUVD-2021-26682

Malware in sbrugna...

EUVD-2024-38110

Malicious code in bioql PyPI...

EUVD-2024-38109

Malicious code in bioql PyPI...

EUVD-2024-36331

Malicious code in bioql PyPI...

CVE-2025-34226

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-34226 OpenPLC Runtime v3 Persistent DoS

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-34226

OpenPLC Runtime v3 is affected by an input validation flaw in the /upload-program-action endpoint: the epoch_time parameter submitted during program uploads is not validated, allowing corruption of the programs database. After a malformed upload, the runtime can operate, but on restart the databa...

OpenPLC Runtime version 3 安全漏洞

OpenPLC Runtime version 3 is a programmable logic controller by Thiago Alves Individual Developer. A security vulnerability exists in OpenPLC Runtime version 3, which stems from insufficient input validation of the epochtime field, which could lead to program database corruption, resulting in a...