CVE-2021-22723

The CVE-2021-22723 entry describes a Cross-Site Scripting vulnerability (CWE-79) exploitable via Cross-Site Request Forgery (CSRF) in Schneider Electric EVlink devices: EVlink City (EVC1S22P4 / EVC1S7P4), EVlink Parking (EVW2 / EVF2 / EV.2), and EVlink Smart Wallbox (EVB1A), all versions prior to...

Schneider Electric EVlink Charging Stations Authentication Bypass / Code Execution Vulnerabilities

Multiple Schneider Electric EVlink Charging Stations suffers from authentication bypass and remote code execution vulnerabilities. Schneider Electric EVlink Charging Stations Authentication Bypass / Code Execution Vulnerabilities...

Multiple Schneider Electric EVlink Charging Stations 数据伪造问题漏洞

Schneider Electric EVlink Charging Stations is a charging device from Schneider Electric France. Multiple Schneider Electric EVlink Charging Stations is vulnerable to a data forgery issue, details of this vulnerability are not available at this time, please check the vendor's homepage for more...

Multiple Schneider Electric EVlink Charging Stations 信任管理问题漏洞

Schneider Electric EVlink Charging Stations is a charging device from Schneider Electric France. Multiple Schneider Electric EVlink Charging Stations is vulnerable to a trust management issue, details of this vulnerability are not available at this time, please check the vendor's homepage for mor...

Unauthorized Access Vulnerability in Business Toll Comprehensive Management Platform of Shanghai Huini Information Technology Co.

Shanghai Huini Information Technology Co., Ltd. is a company mainly engaged in water business charging software. An unauthorized access vulnerability exists in Shanghai Huini Information Technology Co., Ltd.'s business charging integrated management platform, which can be exploited by attackers t...

Improper Access Control in codingtrain/website

✍️ Description Google Maps API key without proper referer restrictions is found in your repo. It can be embeded to anyone's website and if the billing account is active, it will incur charges on your account. 🕵️‍♂️ Proof of Concept Visit this link to verify that you can use the service by visiting...

Catalog Traversal Vulnerability in Corto's Fully Intelligent Parking Payment System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A directory traversal vulnerability exists in KOTO's fully intelligent parking charging system, which can be exploited by attacke...

Login Bypass Vulnerability in Charging Pile Operation Management System of Shenzhen Crestec Technology Co.

Shenzhen Crestec Technology Co., Ltd. is a technology enterprise engaged in the research, development, manufacturing and sales of UPS uninterruptible power supply, server room integration, maintenance-free lead-acid batteries, inverter power supply. A login bypass vulnerability exists in the...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

CVE-2020-11834

CVE-2020-11834 affects the file path /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, where the function proc_fastchg_fw_update_write does not validate the length parameter, creating a vulnerability. Referenced in multiple sources (Red Hat, NVD, CVE databases) with the same descript...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

Hacking a Power Supply

This hack targets the firmware on modern power supplies. Yes, power supplies are also computers. Normally, when a phone is connected to a power brick with support for fast charging, the phone and the power adapter communicate with each other to determine the proper amount of electricity that can ...

The vulnerability of the Enhanced Charging Service, a microprogramming-based software service for Cisco ASR 5000 routers, allows attackers to circumvent traffic classification rules and potentially avoid paying for the usage of network traffic.

The vulnerability of the Enhanced Charging Service provided by Cisco ASR 5000 router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass traffic classification rules and potentially avoid paying for t...

Unauthorized Access Vulnerability in Intelligent Parking Cloud Charging System of Chongqing Tedi Technology Co.

Chongqing Tedi Technology Co., Ltd. leads the development and construction of intelligent community cloud platform, to create a cloud community service platform based on the integration of webpage + WeChat + APP, centralized management and control of community intelligent equipment, including...

CVE-2020-3244

A vulnerability in the Enhanced Charging Service ECS functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of...

Cisco ASR 5000 Input Validation Error Vulnerability

Cisco ASR 5000 is a 5000 series gateway product from Cisco. An input validation error vulnerability exists in the Enhanced Charging Service ECS feature in Cisco ASR 5000 Series Aggregation Services Routers versions prior to Release 21.18.0. A remote attacker could exploit this vulnerability by...

Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability

A vulnerability in the Enhanced Charging Service ECS functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of...

e-charging-hamburg.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161243 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting e-charging-hamburg.de...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the KETO Fully Intelligent Parking Video Charging System. An attacker can exploit the vulnerability to obtain sensitive database information...

Virtual Freer 1.58 - Remote Command Execution

Exploit title : Virtual Freer 1.58 - Remote Command Execution Exploit Author : SajjadBnd Date : 2020-02-17 Vendor Homepage : http://freer.ir/virtual/ Software Link : http://www.freer.ir/virtual/download.php?action=get Software Linkmirror : http://dl.nuller.ir/virtualfreerv1.58NuLLeR.iR.zip Tested...