EUVD-2025-54664

Malicious code in electrical-aquamarine-gibbon npm...

EUVD-2025-54665

Malicious code in electrical-amaranth-bee npm...

EUVD-2025-54663

Malicious code in electrical-black-leopard npm...

EUVD-2025-54661

Malicious code in electrical-copper-stork npm...

Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54662

Malicious code in electrical-bronze-unicorn npm...

EUVD-2025-47920

Malicious code in electricalflamingoz3n npm...

EUVD-2019-15191

Malware in sbrugna...

EUVD-2022-30411

Malicious code in bioql PyPI...

EUVD-2022-30939

Malicious code in bioql PyPI...

EUVD-2025-14720

Malicious code in bioql PyPI...

appRain CMF Cross-Site Scripting Vulnerability (CNVD-2025-20910)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user-supplied input on the /appain/admin/config/electrical endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...

WordPress Electrician - Electrical Service WordPress theme <= 1.0 - Cross Site Scripting (XSS) Vulnerability

WordPress Electrician - Electrical Service WordPress theme = 1.0 - Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Electrician - Electrical Service WordPress versions = 1.0...

SIMulator: SIM Tracing on a (Pico-)Budget

SIM tracing -- the ability to inspect, modify, and relay communication between a SIM card and modem -- has become a significant technique in cellular network research. It enables essential security- and development-related applications such as fuzzing communication interfaces, extracting session...

The US Grid Attack Looming on the Horizon

A major cyberattack on the US electrical grid has long worried security experts. Such an attack wouldn’t be easy. But if an adversary pulled it off, it’d be lights out in more ways than one...

The vulnerability of software for electrical system design, simulation, and automation from ABB e-Design, related to incorrect default settings, allows a perpetrator to trigger a service failure.

The vulnerability of software for electrical system design, simulation, and automation provided by ABB e-Design is related to incorrect default settings. Exploiting this vulnerability can allow attackers to trigger service failures...

CVE-2025-31930

Siemens VersiCharge AC Series EV Chargers are affected by CVE-2025-31930. The issue stems from Modbus service being enabled by default on affected devices, allowing an attacker connected to the same network to remotely control the charger. Affected models include IEC 1Ph/3Ph variants and UL/Versi...

CVE-2025-31929

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket 8EM1310-2EH04-0GA0 All versions, IEC 1Ph 7.4kW Child socket/ shutter 8EM1310-2EN04-0GA0 All versions, IEC 1Ph 7.4kW Parent cable 7m 8EM1310-2EJ04-3GA1 All versions, IEC 1Ph 7.4kW Parent cable 7m incl. SIM 8EM1310-2EJ04-3GA2 All...

The Trial at the Tip of the Terrorgram Iceberg

Atomwaffen Division cofounder and alleged Terrorgram Collective member Brandon Russell is facing a potential 20-year sentence for an alleged plot on a Baltimore electrical station. His case is only the beginning...

b2b.electricalindustriesgroup.com Cross Site Scripting vulnerability OBB-3920697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...