CVE-2025-68140

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

EUVD-2025-206316

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

CVE-2025-68140 EVerest allows null session ID to bypass session ID verification

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

PT-2026-3856

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

Everest-core security vulnerabilities

Everest-core is a major component of the open-source electric vehicle charging software stack developed by EVerest. Versions of Everest-core prior to 2025.9.0 contained security vulnerabilities. These vulnerabilities stemmed from validation flaws when the default value of the session ID was 0,...

📄 Mobile Mouse 3.6.0.4 Remote Code Execution

Mobile Mouse version 3.6.0.4 remote code execution proof of concept exploit written in php that takes advantage of an older flaw from 2022. ============================================================================================================================================= | Title : Mobil...

CVE-2025-66116

creationtimestamp| type| source ---|---|--- 2026-01-20 20:14:10+00:00| seen| Telegram/ZHK9Ax7pz7g83q2gubkfj9qF1U1WNdVQW2eXMG7gaIS8Ew 2026-01-20 20:28:32+00:00| seen| Telegram/jAKBh9rG5uUBdJqmDLLuw9WMdRwqmZINckpXdYl26M0yPRw...

CVE-2025-60199

creationtimestamp| type| source ---|---|--- 2026-01-20 20:13:56+00:00| seen| Telegram/H3CnBfK7PYddEv-M1ZTryUsCc1Bn9GTSxVyKpS3KhQYxX70 2026-01-20 20:14:12+00:00| seen| Telegram/S7LU1KYoexzUkQbYGegiPNoF7EU-htKWL8zCqfkFbNHFsA...

CVE-2025-58995

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:30+00:00| seen| Telegram/sWyHUnrbIHX-Kbgt2WnfloqXmwwtZwbq4XH8MFv2PgEZKIo 2026-01-20 20:12:55+00:00| seen| Telegram/QnrH5g5OwGBUAy6ScRFD4MTujgrWMEa1D4kehJKdWHvpG4...

CVE-2025-49372

creationtimestamp| type| source ---|---|--- 2026-01-20 20:10:39+00:00| seen| Telegram/wcxfxhIjQZfGrpmoi9YVl8EqIpyUUAzOkMzbhBvCapKIP8 2026-01-20 20:10:44+00:00| seen| Telegram/xvvbL5Om5SDy9fQ-TK8aTlHNeA5-FbP6-yWc-4dkev7kv8...

CVE-2025-53238

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:37+00:00| seen| Telegram/vDPjge6K1tF404WPf9Q1hmt1q7CFqM-WlHcCHFTuMGtlY9k 2026-01-20 20:03:42+00:00| seen| Telegram/iqXHuMDsRQAGn3zdqA8hR0jm1F7aKD9CXHXY4CRfZNP0Hs...

CVE-2025-49963

creationtimestamp| type| source ---|---|--- 2026-01-20 20:02:28+00:00| seen| Telegram/fMYFu5KBFVLJT0mlLdRRIfBapDJ5HzsO-6rws7oTheN0tY 2026-01-20 20:02:32+00:00| seen| Telegram/fN3HRIXpamftNoJynabwgfF0PiG7n5MNorfl43ZW2B0h3M...

GHSA-8W7M-W749-RX98 Pterodactyl websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks

Summary Websockets within wings lack proper rate limiting and throttling. As a result a malicious user can open a large number of connections and then request data through these sockets, causing an excessive volume of data over the network and overloading the host system memory and cpu...

CVE-2025-14027

CVE-2025-14027 affects Rockwell Automation 1756-RM2 and 1756-RM2XT firmware in ControlLogix Redundancy Enhanced Modules. The issue is described as multiple denial-of-service vulnerabilities triggered by crafted inputs (including malformed Class 3 messages, memory leak conditions, and other resour...

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads, likely with the intent to deploy a remote access trojan RAT. The activity delivers "weaponized files via Dynamic Link Library DLL sideloading, combined wit...

PT-2026-23549

Name of the Vulnerable Software and Affected Versions OpenClaw Nextcloud Talk plugin versions prior to 2026.2.6 Description The Nextcloud Talk plugin allows attackers to bypass direct message DM and room allowlists. The plugin incorrectly uses the mutable actor.name field for allowlist validation...

VulnCheck KEV: CVE-2024-12248

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...

PT-2026-3559

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

MiracleLinux 7 : java-11-openjdk-11.0.7.10-4.el7 (AXSA:2020-011:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-011:04 advisory. OpenJDK: Incorrect bounds checks in NIO Buffers Libraries, 8234841 CVE-2020-2803 OpenJDK: Incorrect type checks in MethodType.readObject Libraries,...

MiracleLinux 8 : bind9.16-9.16.23-0.16.el8_9.2.ML.1 (AXSA:2024-7685:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7685:01 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: Querying RFC 1918 reverse zones may cause an assertion failure...