Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

A previously undocumented cyber espionage-focused threat actor named LilacSquid has been linked to targeted attacks spanning various sectors in the United States U.S., Europe, and Asia as part of a data theft campaign since at least 2021. "The campaign is geared toward establishing long-term acce...

Fuji Electric Monitouch V-SFT (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Fuji Electric Equipment : Monitouch V-SFT Vulnerabilities : Out-of-Bounds Write, Stack-Based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Campbell Scientific CSI Web Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Campbell Scientific Equipment : CSI Web Server Vulnerabilities : Path Traversal, Weak Encoding for Password 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2024-0851

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection. This issue affects Smartpower: through V24.05.27...

CVE-2024-0851 SQLi in Grup Arge Energy and Control Systems's Smartpower

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection. This issue affects Smartpower: through V24.05.27...

CVE-2024-0851

CVE-2024-0851 affects Grup Arge Energy and Control Systems Smartpower (web-based Energy Management System). The vulnerability is an SQL Injection due to improper neutralization of special elements in SQL commands, affecting Smartpower up to and including V24.05.27. Documented impact indicates hig...

CVE-2024-0851 SQLi in Grup Arge Energy and Control Systems's Smartpower

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection. This issue affects Smartpower: through V24.05.27...

Grup Arge Energy and Control Systems SmartPower Energy Management System SQL注入漏洞

Grup Arge Energy and Control Systems SmartPower Energy Management System is a web-based system from Grup Arge Energy and Control Systems developed specifically to improve energy efficiency in organizations. A SQL injection vulnerability exists in Grup Arge Energy and Control Systems SmartPower...

Siemens SICAM Product Command Injection Vulnerability

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energ...

Unspecified Vulnerability in Siemens SICAM Products

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energ...

Nordic Semiconductor nRF Sniffer 安全漏洞

Nordic Semiconductor nRF Sniffer is a tool for debugging Bluetooth Low Energy BLE applications from Nordic Semiconductor, Norway. A security vulnerability in Nordic Semiconductor nRF Sniffer for Bluetooth LE, which arises from setting incorrect file permissions, allows attackers to execute code v...

PT-2024-13385 · Nordic Semiconductor · Nrf Sniffer For Bluetooth Le

Name of the Vulnerable Software and Affected Versions: Nordic Semiconductor nRF Sniffer for Bluetooth LE versions 3.0.0 through 4.1.1 Description: The issue is related to incorrect file permissions set for certain scripts in the Nordic Semiconductor nRF Sniffer for Bluetooth LE. This allows...

Unspecified Vulnerability in Hitachi Energy RTU500 series CMU Firmware (CNVD-2025-02734)

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A security vulnerability exists in Hitachi Energy RTU500 series CMU Firmware, which can be exploited by attackers to bypass security updates...

Delta Electronics DIAEnergie Denial of Service Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. A denial of service vulnerability exists in Delta Electronics DIAEnergie, which originates from CEBC.exe restarting the system when processing ICS Restart messages. An attacker could...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2024-29663)

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

PT-2024-11569 · Nuki · Nuki Smart Lock 2.0 +1

Name of the Vulnerable Software and Affected Versions: Nuki Smart Lock 3.0 versions 3.0 through 3.3.4 Nuki Smart Lock 2.0 versions 2.0 through 2.12.3 Description: An issue was discovered on certain Nuki Home Solutions devices, where it is possible to send multiple BLE malformed packets to block...

PT-2024-11571 · Nuki · Nuki Smart Lock 2.0 +1

Name of the Vulnerable Software and Affected Versions: Nuki Smart Lock 3.0 versions 3.0 through 3.3.4 Nuki Smart Lock 2.0 versions 2.0 through 2.12.3 Description: An issue was discovered on certain Nuki Home Solutions devices, where some BLE commands could be called from unprivileged accounts,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-50313)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Delta Electronics DIAEnergie GetDIACloudList SQL Injection Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. Delta Electronics DIAEnergie GetDIACloudList suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. A SQL injection vulnerability exists in Delta Electronics DIAEnergie. An attacker can use this vulnerability to view, add, modify, or delete information in the back-end database...