Skip to content
pwned.coffee
Updated 6 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
3 Dec 2025
1 new, 0 updated.
New that day
high
patched
exploited
3 Dec 2025
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. Added to CISA KEV on 2025-12-03 (federal deadline 2025-12-24).
CVE-2021-26828
1 source