PT-2025-45593

Name of the Vulnerable Software and Affected Versions Hundred Plus EIP Plus affected versions not specified Description A flaw exists in Hundred Plus EIP Plus that allows remote attackers with elevated privileges to upload and execute web shell backdoors. Successful exploitation could lead to...

Hundred Plus EIP Plus 授权问题漏洞

Hundred Plus EIP Plus is an enterprise management software from Hundred Plus Ares Taiwan, China. Hundred Plus EIP Plus suffers from an authorization issue vulnerability that stems from a weak password recovery mechanism, which could allow an unauthenticated, remote attacker to predictably or...

CVE-2025-62370

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

Phoenix Contact多款产品 安全漏洞

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and others are an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in a number of Phoenix Contact products. The vulnerability stems from the ability of an unauthenticated attacker to...

EUVD-2020-5803

Malware in sbrugna...

EUVD-2021-9987

Malicious code in bioql PyPI...

EUVD-2022-6227

Malicious code in bioql PyPI...

EUVD-2022-6398

Malicious code in bioql PyPI...

EUVD-2024-42824

Malicious code in bioql PyPI...

EUVD-2022-6503

Malicious code in bioql PyPI...

EUVD-2022-6478

Malicious code in bioql PyPI...

EUVD-2025-19744

Malicious code in bioql PyPI...

EUVD-2021-8949

Malicious code in bioql PyPI...

EUVD-2021-32454

Malicious code in bioql PyPI...

EUVD-2022-46602

Malicious code in bioql PyPI...

EUVD-2024-42798

Malicious code in bioql PyPI...

EUVD-2025-25833

Malicious code in bioql PyPI...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on September 2, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-245-01 Delta Electronics EIP Builder ICSA-25-245-02 Fuji Electric FRENIC-Loader 4...

CVE-2025-57704

Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability...

Delta Electronics EIP Builder XML External Entity Injection Vulnerability

Delta Electronics EIP Builder is a configuration tool for connecting various devices from Delta Electronics China. Delta Electronics EIP Builder suffers from an XML External Entity Injection vulnerability that stems from improper handling of XML external entities in file parsing, which can be...