CVE-2026-5601

A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public...

Acrel Electrical Prepaid Cloud Platform 访问控制错误漏洞

Acrel Electrical Prepaid Cloud Platform is a platform developed by Acrel Electric of China. Version 1.0 of the Acrel Electrical Prepaid Cloud Platform contains an access control vulnerability, which stems from improper handling of the /bin.rar file. This vulnerability may lead to information...

PT-2026-30511

A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public...

CVE-2026-22358

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Electrician - Electrical Service WordPress electrician allows Server Side Request Forgery.This issue affects Electrician - Electrical Service WordPress: from n/a through = 5.6...

WordPress plugin "Electrician - Electrical Service" – code-related vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress Electrician - Electrical Service WordPress theme <= 5.6 - Server Side Request Forgery (SSRF) vulnerability

WordPress Electrician - Electrical Service WordPress theme = 5.6 - Server Side Request Forgery SSRF vulnerability discovered by Bonds in WordPress Theme Electrician - Electrical Service WordPress versions = 5.6...

MAL-2025-138685 Malicious code in electrical-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117417

Malicious code in electrical-orange-duck npm...

EUVD-2025-99313

Malicious code in electricalcaribouz3n npm...

EUVD-2025-105576

Malicious code in electricallobsterz3n npm...

EUVD-2025-76997

Malicious code in electricalechidna-appteadev npm...

EUVD-2025-76996

Malicious code in electricalhaddock-teagooddev npm...

EUVD-2025-82085

Malicious code in electricalbedbugreplicateautomation npm...

EUVD-2025-70649

Malicious code in electricalcicadaz3n npm...

EUVD-2025-64346

Malicious code in electricalcatz3n npm...

EUVD-2025-64344

Malicious code in electricalgrouserequirement npm...

EUVD-2025-64345

Malicious code in electricalcrawdadz3n npm...

Malicious code in electrical_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a57db771289b49ce70ccd6ad7875c5338ae9d89dc68afb66ab783133e60a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54665

Malicious code in electrical-amaranth-bee npm...