95 matches found
EUVD-2024-40406
Malicious code in bioql PyPI...
EUVD-2024-40403
Malicious code in bioql PyPI...
EUVD-2024-40405
Malicious code in bioql PyPI...
EUVD-2024-40397
Malicious code in bioql PyPI...
EUVD-2024-40399
Malicious code in bioql PyPI...
EUVD-2024-40392
Malicious code in bioql PyPI...
EUVD-2024-40395
Malicious code in bioql PyPI...
EUVD-2024-40401
Malicious code in bioql PyPI...
EUVD-2024-40396
Malicious code in bioql PyPI...
EUVD-2024-40404
Malicious code in bioql PyPI...
EUVD-2024-40407
Malicious code in bioql PyPI...
EUVD-2024-40394
Malicious code in bioql PyPI...
EUVD-2024-40398
Malicious code in bioql PyPI...
EUVD-2024-40400
Malicious code in bioql PyPI...
EUVD-2024-40402
Malicious code in bioql PyPI...
iocharger Command Injection Vulnerability
iocharger is an electric vehicle charging and smart energy management solution from the Chinese company Galaxy Zhangtan iocharger. iocharger suffers from a command injection vulnerability that stems from the application's failure to properly filter constructed command special characters, commands...
CVE-2024-43659
After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...
CVE-2024-43660
The CGI script .sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to download any file on the filesystem, including...
CVE-2024-43662
The .exe or .exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderat...
CVE-2024-43663
There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...