CVE-2022-31491

CVE-2022-31491 Модуль Metasploit и файлы PoC в этом репозитории. Дополнительная информация Voltronic Viewpower/Pro и ребрендинги/производные Программное обеспечение для управления ИБП обычно позволяет должным образом аутентифицированному и авторизованному пользователю через веб-интерфейс настроит...

CVE-2022-43110

CVE-2022-43110 Дополнительная информация Voltronic Viewpower/Pro и ребрендинги/производные Программное обеспечение для управления ИБП должно позволять только надлежащим образом аутентифицированному и авторизованному администратору настраивать систему через веб-интерфейс. Из-за CWE-425: прямой...

EUVD-2022-54224

Malicious code in bioql PyPI...

EUVD-2023-56305

Malicious code in bioql PyPI...

EUVD-2023-56282

Malicious code in bioql PyPI...

EUVD-2023-56298

Malicious code in bioql PyPI...

EUVD-2023-56296

Malicious code in bioql PyPI...

EUVD-2023-56283

Malicious code in bioql PyPI...

Voltronic Power多款产品 安全漏洞

Voltronic Power ViewPower and others are products of Voltronic Power.Voltronic Power ViewPower is a monitoring and management software for solar inverters.Voltronic Power ViewPower Pro is a software for monitoring and managing uninterrupted Voltronic Power ViewPower Pro is a software program for...

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

CVE-2022-31491: Improper Control of Generation of Code

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

CVE-2022-31491

Voltronic Power and PowerShield New Zealand products, specifically ViewPower through 1.04-24215 , ViewPower Pro through 2.0-22165 , and PowerShield Netguard before 1.04-23292 , are vulnerable to remote code execution. The flaw exists in a critical underlying function exposed over the network (CWE...

Exploit for CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC are coming. Further...

Voltronic Power ViewPower XML External Entity Injection Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from an XML external entity injection vulnerability that can be exploited by attackers to disclose sensitive information...

Voltronic Power ViewPower Elevation of Privilege Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An elevation of privilege vulnerability exists in Voltronic Power ViewPower Pro due to hard-coded database credentials. An attacker can exploit the vulnerability to escalate privileges and execu...

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

CVE-2023-51590

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. T...

CVE-2023-51593

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...