EUVD-2025-11132

Malicious code in bioql PyPI...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain information about another user's electric vehic...

Carlo Gavazzi UWP SQL注入漏洞

Carlo Gavazzi UWP is a monitoring and control Universal Web Platform from Carlo Gavazzi. It is used for applications such as building automation, energy efficiency performance management and parking lot guidance. A SQL injection vulnerability exists in Carlo Gavazzi UWP 3.0, which can be exploite...

CVE-2022-29578

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

Crocus has an unauthorized access vulnerability

Crocus is an energy data analytics platform. An unauthorized access vulnerability exists in Crocus. An attacker can use the vulnerability to bypass permission determination to access functional pages...

Weak password vulnerability in Crocus

Crocus is an energy data analytics platform. Crocus suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

REBA and VERGE 2019: Climate Action Through Partnership and Innovation

This October at the Renewable Energy Buyers Alliance REBA and Verge conferences in Oakland, California, Akamai had the opportunity to actively engage with 3,000 of our like-minded sustainability peers on making incremental environmental change. To no surprise, I witnessed passionate dialogue arou...

dadosenergeticos.energia.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-677660 Description| Value ---|--- Affected Website:| dadosenergeticos.energia.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Some Solar Power Meters are Vulnerable to Command Injection Attacks

Solar software and analytics firm Locus Energy has pushed out a patch to its residential and commercial power meters to address a vulnerability that could allow hackers to access equipment and remotely execute code. According to independent security researcher Daniel Reich, who privately disclose...