4137 matches found
GHSA-MW26-5G2V-HQW3 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...
PT-2025-36336
Name of the Vulnerable Software and Affected Versions DeepDiff versions 5.0.0 through 8.6.0 Description DeepDiff is a Python project for deep difference and search of data. Versions 5.0.0 through 8.6.0 are susceptible to class pollution through the Delta class constructor. When combined with a...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on September 2, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-245-01 Delta Electronics EIP Builder ICSA-25-245-02 Fuji Electric FRENIC-Loader 4...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...
CVE-2025-58318 DIAView - Authentication Bypass Vulnerability
Delta Electronics DIAView has an authentication bypass vulnerability...
CVE-2025-58318
Delta Electronics DIAView is affected by CVE-2025-58318, described as an authentication bypass vulnerability. Public entries consistently reference DIAView (industrial configuration software from Delta Electronics) with a bypass issue, and the CVSS vector indicates a Local attack with Low access ...
Delta Electronics DIAView 安全漏洞
Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security bypass vulnerability exists in Delta Electronics DIAView, which can be exploited by attackers to cause authentication bypass...
PT-2025-35467
Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAView affected versions not specified Description: Delta Electronics DIAView has an authentication bypass issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-2025-57704
Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability...
CVE-2025-53419
Delta Electronics COMMGR has Code Injection vulnerability...
CVE-2025-53418
Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability...
Delta Electronics COMMGR
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for...
Delta Electronics CNCSoft-G2
RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on affected installations of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds...
Delta Electronics COMMGR Code Injection Vulnerability (CNVD-2025-22950)
Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code injection vulnerability exists in Delta Electronics COMMGR, which can be exploited by an attacker to execute arbitrary code on the system...
Delta Electronics COMMGR Command Injection Vulnerability
Delta Electronics COMMGR is a communication management software from Delta Electronics China. Delta Electronics COMMGR suffers from a command injection vulnerability due to improper boundary checking when creating specially designed .isp files, no details of the vulnerability are available at thi...
Delta Electronics EIP Builder XML External Entity Injection Vulnerability
Delta Electronics EIP Builder is a configuration tool for connecting various devices from Delta Electronics China. Delta Electronics EIP Builder suffers from an XML External Entity Injection vulnerability that stems from improper handling of XML external entities in file parsing, which can be...
