CVE-2025-1066

OpenPLC_V3 contains an arbitrary file upload vulnerability that can be leveraged for malvertising or phishing campaigns. The affected software is an open-source programmable logic controller developed by Thiago Alves, used for industrial automation and research. While the specific version affecte...

CVE-2024-36981

Summary: CVE-2024-36981 affects OpenPLC_v3 (commit b4702061dc14d1024856f71b4543298d77007b88) with an out-of-bounds read in the Runtime EtherNet/IP PCCC parser, enabling denial of service via specially crafted EtherNet/IP requests. The TALOS report clarifies two vulnerable paths in OpenPLC_v3: Sen...