CVE-2025-36757 Bypass of administrator login screen in SolaX Cloud

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system...

CVE-2025-36757 Bypass of administrator login screen in SolaX Cloud

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system...

CVE-2025-36757

CVE-2025-36757 affects SolaX Cloud (PV monitoring/management platform). The vendor-agnostic description indicates an attacker can bypass the administrator login screen via parameter tampering to gain limited access to the system. The CVSS 4.0 vector and base score are provided (6.3, MEDIUM), impl...

CVE-2025-36758

CVE-2025-36758 relates to a bypass of bruteforce protection in SolaX Cloud . Multiple sources (NVD, Red Hat, CVE listings) describe that the vulnerability allows bypassing the authentication attempt clipping level via the Forgot Password flow, effectively acting as an oracle. The core affected pr...

CVE-2025-36758 Bypass of bruteforce protection in SolaX Cloud

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle...

CVE-2025-36758 Bypass of bruteforce protection in SolaX Cloud

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle...

CVE-2025-36756 Device Takeover vulnerability in SolaX Cloud

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...

CVE-2025-36756

The CVE-2025-36756 entry describes a missing-authorization vulnerability in the SolaX Cloud platform that could allow takeover of a known-serial-number SolaX solar inverter. Affected component is the SolaX Cloud platform beneath the inverter management flow; root cause is insufficient access cont...

CVE-2025-36756 Device Takeover vulnerability in SolaX Cloud

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...

China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations

The House Select Committee on China has formally issued an advisory warning of an "ongoing" series of highly targeted cyber espionage campaigns linked to the People's Republic of China PRC amid contentious U.S.–China trade talks. "These campaigns seek to compromise organizations and individuals...

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud, which stems from the username suggestion feature leaking sensitive information...

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...

PT-2025-37029

Name of the Vulnerable Software and Affected Versions: SolaX Cloud affected versions not specified Description: It is possible to bypass the administrator login screen. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system. Recommendations: At...

PT-2025-37030

Name of the Vulnerable Software and Affected Versions: SolaX Cloud affected versions not specified Description: It is possible to bypass the clipping level of authentication attempts through the 'Forgot Password' functionality, acting as an oracle. Recommendations: At the moment, there is no...

Linux Distros Unpatched Vulnerability : CVE-2017-10600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image i...

PT-2025-37161

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.12 through 18.1.6 GitLab CE/EE versions 18.2 through 18.2.6 GitLab CE/EE versions 18.3 through 18.3.2 GitLab versions prior to 16.10.5 GitLab versions prior to 17.0.3 GitLab versions prior to 17.1.1 Description: An iss...

SolaX Cloud 安全漏洞

SolaX Cloud is a PV monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud that stems from a bypass of the Forgot Password feature, which could lead to an authentication attempt limit bypass...

PT-2025-37031

Name of the Vulnerable Software and Affected Versions: SolaX Cloud versions prior to 27-06-2025 Description: SolaX Cloud leaks sensitive information, such as user email addresses and phone numbers, by suggesting similar user accounts when user names are provided. This information disclosure poses...

SolaX Cloud 安全漏洞

SolaX Cloud is a PV monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud that stems from an administrator login screen bypass that could result in limited system access...

The vulnerability of the Cloud-init configuration tool, related to the improper assignment of permissions for critical resources, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cloud-init configuration tool is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to execute arbitrary commands...