2785 matches found
CVE-2026-0778
Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...
Enel X JuiceBox 40: Access control error vulnerability
The Enel X JuiceBox 40 is a household electric vehicle charging station developed by the American company Enel X. The Enel X JuiceBox 40 has a access control vulnerability, which stems from the lack of authentication in the Telnet service. This vulnerability may lead to remote code execution...
CVE-2025-54852
creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:40+00:00| seen| https://infosec.place/objects/23c3e016-78b1-467e-8e84-2cd0b8650286...
CVE-2026-22862
creationtimestamp| type| source ---|---|--- 2026-01-13 22:41:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdmsy4nf22q 2026-01-24 21:25:30+00:00| seen| https://gist.github.com/alon710/075f469985ff370437f0ec2cae3d97ec 2026-01-24 22:40:57+00:00| seen|...
PT-2026-2006
Name of the Vulnerable Software and Affected Versions Enel X JuiceBox 40 affected versions not specified Description The Enel X JuiceBox 40 device contains a flaw due to a missing authentication mechanism in its Telnet service, potentially allowing for remote code execution. This issue was...
CVE-2026-21684
creationtimestamp| type| source ---|---|--- 2026-01-07 23:09:50+00:00| seen| Telegram/Hv7piurWFmTJB7c7iHri9T0M-meMIfk5qPkk7ikOJpSuKtA 2026-01-07 23:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbundduicw2e...
CVE-2025-59379
creationtimestamp| type| source ---|---|--- 2026-01-06 18:32:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrlnbm27l2b...
CVE-2025-15456
creationtimestamp| type| source ---|---|--- 2026-01-05 06:00:38+00:00| published-proof-of-concept| Telegram/PEDMC-xQRSNOdcRnaiEMJorZFRbVJMF3imIAdH1nAh3lQ 2026-01-05 08:40:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbo24dt2l42e...
CVE-2025-69257
creationtimestamp| type| source ---|---|--- 2025-12-30 22:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbag76nyee2x 2026-01-24 22:44:19+00:00| seen| https://gist.github.com/alon710/5f1f59b372627b43576ca003c1b2b010...
CVE-2025-69205
creationtimestamp| type| source ---|---|--- 2025-12-29 23:27:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5yfgfzcn2q...
CVE-2025-15091
creationtimestamp| type| source ---|---|--- 2025-12-26 00:40:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mau2lmyxpw2g 2025-12-26 02:35:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115783532715952577 2025-12-26 14:53:12+00:00| seen|...
Mozilla Thunderbird ESR < 17.0.5
The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has n...
Mozilla Thunderbird < 17.0.5
The version of Thunderbird installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...
Mozilla Firefox ESR < 17.0.5
The version of Firefox ESR installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...
OPENSUSE-SU-2025:20159-1 Security update for keylime
This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs bsc1254199. - CVE-2025-1057: registrar denial-of-service due to...
CVE-2025-14327
creationtimestamp| type| source ---|---|--- 2025-12-10 13:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6poeiyu2p 2025-12-11 15:25:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7puzz3ea222 2026-01-13 15:07:45+00:00| seen|...
GHSA-GWF3-8GM3-QRMJ
creationtimestamp| type| source ---|---|--- 2025-11-21 18:40:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589147730637509...
EUVD-2025-141500
Malicious code in hokage-40 npm...
Malicious code in lia-40 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00757010b030278ccf82174c83e8d774c8825a494fb7cb4f15abdb5e16d2cd36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...