EUVD-2024-53752

Malicious code in bioql PyPI...

CVE-2025-59398

The OCPP implementation in libocpp before 0.26.2 allows a denial of service EVerest crash via JSON input larger than 255 characters, because a CiString object is created with StringTooLarge set to Throw...

CVE-2025-59398

The OCPP implementation in libocpp before 0.26.2 allows a denial of service EVerest crash via JSON input larger than 255 characters, because a CiString object is created with StringTooLarge set to Throw...

CVE-2025-59398

Summary : CVE-2025-59398 affects the libocpp OCPP implementation prior to 0.26.2. The vulnerability arises when processing JSON input larger than 255 characters, which leads to a crash due to a CiString object created with StringTooLarge set to Throw, resulting in a denial of service (EVerest cra...

CVE-2025-41682

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

CVE-2025-41682

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

CVE-2025-41682

CVE-2025-41682 affects Bender GmbH & Co. KG charge controllers (e.g., CC612, CC613, ICC15xx). An authenticated, low-privileged attacker can access credentials stored on the device, including the manufacturer password, via insecure storage. Documents indicate this is a credential-disclosure vulner...

CVE-2025-41682 Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

CVE-2025-41682 Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

Bender多款产品 安全漏洞

Bender CC612 and others are products of Bender, Germany.Bender CC612 is a charge controller.Bender CC613 is a charge controller.Bender ICC15xx is an insulation monitoring device. A security vulnerability exists in several Bender products, which stems from an insecure default configuration that...

Bender多款产品 安全漏洞

Bender CC612 and others are products of Bender, Germany.Bender CC612 is a charge controller.Bender CC613 is a charge controller.Bender ICC15xx is an insulation monitoring device. A security vulnerability exists in a number of Bender products, which stems from the ability to access credentials...

PT-2025-36444

Name of the Vulnerable Software and Affected Versions: Bender GmbH & Co. KG charge controllers affected versions not specified Description: An authenticated, low-privileged attacker can obtain credentials stored on the charge controller, including the manufacturer password. Recommendations: At th...

CVE-2025-25271

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface...

PHOENIX CONTACT CHARX SEC 安全漏洞

PHOENIX CONTACT CHARX SEC is a series of AC charging controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT CHARX SEC that originates from an unauthenticated neighboring attacker being able to configure a new OCPP backend due to the configuration interfa...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In the mm, slab context, slab-objexts should always be cleaned up after allocation. When memory allocation profiling is disabled at runtime or due to an error, the shutdownmemprofiling function is called. In this case, slab-objex...

CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

CVE-2023-49956

An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP Open Charge Point Protocol for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions...

DEBIAN-CVE-2022-49204

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

SUSE-SU-2025:0556-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction bsc1235969. - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages bsc123592...

CVE-2025-1078

A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file com.apphousekitchen.aldente-pro.helper of the component XPC Service. The manipulation leads to...