CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

CVE-2024-26003 PHOENIX CONTACT: DoS of the control agent in CHARX Series

An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality...

CVE-2024-26003 PHOENIX CONTACT: DoS of the control agent in CHARX Series

An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality...

CVE-2024-26003

CVE-2024-26003 affects PHOENIX CONTACT CHARX SEC family (e.g., CHARX SEC-3000/3050/3100/3150) with an out-of-bounds read that enables an unauthenticated remote attacker to cause a DoS of the control agent, potentially disrupting charging functionality. Public references describe a buffer-read con...

[updated] Vibrator virus steals your personal information

I know that some of you are expecting a post similar to that about a toothbrush botnet, but this is not a hypothetical case. It actually happened. A Malwarebytes Premium customer started a thread on Reddit saying we had blocked malware from trying to infect their computer after they connected a...

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

Guardians of IoT: Addressing IoT security vulnerabilities in electric vehicles and charging stations

The rise of electric vehicles EVs and charging infrastructure necessitates robust security measures, especially in the context of IoT integration. Explore the vulnerabilities in EV systems and potential risks, proposing mitigation strategies like firmware updates, user authentication, intrusion...

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform—the Elastic Charging Engine—allows a malicious actor to disclose protected information.

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform, specifically the Elastic Charging Engine, exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive...

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications products. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Access to sensitive data Acce...

Navigating London’s Free Electric Car Charging Points

By Owais Sultan Exploring Free Electric Car Charging Points in London. This is a post from HackRead.com Read the original post: Navigating Londons Free Electric Car Charging Points...

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications products. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution Administrator/Root rights Remote code...

EV Charger Hacking Poses a ‘Catastrophic’ Risk

Vulnerabilities in electric vehicle charging stations and a lack of broad standards threaten drivers—and the power grid...

CVE-2023-36815

Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account sealos. io/v1/Payment, resulting in the ability to recharge any amou...

The software vulnerabilities of the EcoStruxure EV Charging Expert parking charging stations allow a violator to modify system settings or user accounts.

The vulnerability of the EcoStruxure EV Charging Expert parking charging station software is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow an attacker to remotely modify system settings or user accounts...

Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations or carry out actions on their behalf.

Vulnerability of EVlink City parking charging stations’ software. The existence of EVlink Parking and EVlink Smart Wallbox stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to impersonate a user controlling the...

Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations.

Vulnerability of EVlink City parking charging stations’ software. The existence of EVlink Parking and EVlink Smart Wallbox stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to impersonate a user controlling the...

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox, which exist due to SSRF requests being forged on the server side, allow a remote intruder to perform unintended actions or gain unauthorized access to protected information.

The software vulnerabilities of EVlink City parking stations exist due to SSRF attacks on the server side. Exploiting these vulnerabilities can allow an attacker to perform unintended actions or gain unauthorized access to protected information...

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox, which allow violators to gain unauthorized access to the charging station’s web server.

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox are associated with insufficient entropy. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to the charging station’s web server...

kernel: bpf, sockmap: Fix more uncharged while msg has more_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

chargingorder.com Cross Site Scripting vulnerability OBB-3300553

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...