EUVD-2025-27998

Malicious code in bioql PyPI...

CVE-2025-41685

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address...

CVE-2025-41685

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address...

CVE-2025-41685 SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address...

CVE-2025-41685 SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address...

CVE-2025-41685

CVE-2025-41685 affects Sunny Portal. A low-privileged remote attacker can obtain the username of another registered user by entering that user’s email address. The description and related sources consistently report a limited disclosure of personal data (username) without detailing a fix in the p...

PT-2025-33715 · Sma Solar Technology · Sunny Portal

Name of the Vulnerable Software and Affected Versions: Sunny Portal affected versions not specified Description: A low-privileged remote attacker can obtain the username of another registered user by entering that user's email address. Recommendations: At the moment, there is no information about...

CVE-2025-41645

Technical details about CVE-2025-41645 are not publicly provided in the supplied documents. Monitor for updates from connected sources.

CVE-2025-41645 SMA: Sunny Portal demo system privilege escalation

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake...

CVE-2025-41645 SMA: Sunny Portal demo system privilege escalation

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake...

SMA Solar Sunny Portal 安全漏洞

SMA Solar Sunny Portal is a photovoltaic data monitoring platform from SMA Solar, Germany. It is used to monitor the operation of PV systems in real time and to obtain performance data. A security vulnerability exists in SMA Solar Sunny Portal that originates from an unauthenticated attacker who...

PT-2025-20882 · Undefined · Undefined

2025-05-13 19:01:23.477089 UTC +09:00 1. CVE-2025-41645 CERTVDE SMA: Sunny Portal demo system privilege escalation An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake. https://vulners.com/cve/CVE-2025-41645...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on March 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-079-01 Schneider Electric EcoStruxure™ ICSA-25-079-02 Schneider Electric Enerlin’X IFE...

CVE-2025-0731 SMA: Sunny Portal Remote Code Execution

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user...

CVE-2025-0731 SMA: Sunny Portal Remote Code Execution

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user...

SMA Solar Sunny Portal 代码问题漏洞

SMA Solar Sunny Portal is a photovoltaic data monitoring platform from SMA Solar, Germany. It is used to monitor PV system operation in real time and to obtain performance data. A code issue vulnerability exists in versions prior to SMA Solar Sunny Portal 19.02.2024, which stems from...