EUVD-2025-4893

Malicious code in bioql PyPI...

CVE-2024-8893

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1...

CVE-2024-8893

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1...

CVE-2024-8893

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1...

CVE-2024-8893

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1...

CVE-2024-8893

The CVE-2024-8893 issue affects GoodWe GW1500‑XS (firmware version 1.1.2.1). The root cause is hard‑coded credentials, enabling anyone in physical proximity to access the inverter’s web interface over Wi‑Fi. Evidence from PT-2025-6771 and CNNVD-202502-1681, Red Hat, NVD, and CVE records consisten...

PT-2025-6771 · Goodwe Technologies Co. · Gw1500‑Xs

Name of the Vulnerable Software and Affected Versions: GoodWe Technologies Co., Ltd. GW1500‑XS version 1.1.2.1 Description: The issue affects GoodWe Technologies Co., Ltd. GW1500‑XS, allowing anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi du...

GoodWe GW1500-XS 安全漏洞

The GoodWe GW1500-XS is a photovoltaic inverter from GoodWe China. A security vulnerability exists in the GoodWe GW1500-XS version 1.1.2.1, which stems from hard-coded credentials that allow a physical neighbor attacker to access the device via Wi-Fi...

es.goodwe.com Cross Site Scripting vulnerability OBB-3819901

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Weak Password Vulnerability in GoodWe PV Plant Monitoring System Android APP

GoodWe PV Plant Monitoring System Android APP is a very global PV plant monitoring app. GoodWe photovoltaic power plant monitoring Android APP system has a weak password vulnerability, the attacker can use the vulnerability to directly enter the remote end of the cell phone monitoring system,...

goodwe.com.cn XSS vulnerability

Open Bug Bounty ID: OBB-247568 Description| Value ---|--- Affected Website:| goodwe.com.cn Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...