Malicious code in additor-react-grid-layout (npm)

The package additor-react-grid-layout was found to contain malicious code...

MAL-2025-32887 Malicious code in sed-deploy-shell-cat-grid (npm)

The package sed-deploy-shell-cat-grid was found to contain malicious code...

MAL-2025-9317 Malicious code in @semdash-kit/grid (npm)

The package @semdash-kit/grid was found to contain malicious code...

MAL-2025-27876 Malicious code in nu-deploy-sigma-mu-grid (npm)

The package nu-deploy-sigma-mu-grid was found to contain malicious code...

MAL-2025-38527 Malicious code in vl-ui-grid (npm)

The package vl-ui-grid was found to contain malicious code...

MAL-2025-19084 Malicious code in earth-grid-bad-visualize-warn (npm)

The package earth-grid-bad-visualize-warn was found to contain malicious code...

MAL-2025-27341 Malicious code in new-al-bum-av-ailable-104465-grid-of-points-0d7rx-ikuywl (npm)

The package new-al-bum-av-ailable-104465-grid-of-points-0d7rx-ikuywl was found to contain malicious code...

MAL-2025-28368 Malicious code in optimize-root-minify-long-grid (npm)

The package optimize-root-minify-long-grid was found to contain malicious code...

MAL-2025-34085 Malicious code in streaming-grid (npm)

The package streaming-grid was found to contain malicious code...

Load-Altering Attacks against Power Grids: a Case Study Using the GB-36 Bus System Open Dataset

The growing digitalization and the rapid adoption of high-powered Internet-of-Things IoT-enabled devices e.g., EV charging stations have increased the vulnerability of power grids to cyber threats. In particular, the so-called Load Altering Attacks LAAs can trigger rapid frequency fluctuations an...

Siemens SICAM Q100/Q200

SUMMARY SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new versions for the affected...

Siemens SIPROTEC 4 and SIPROTEC 4 Compact

SUMMARY SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is...

Neural Network-Based Detection and Multi-Class Classification of FDI Attacks in Smart Grid Home Energy Systems

False Data Injection Attacks FDIAs pose a significant threat to smart grid infrastructures, particularly Home Area Networks HANs, where real-time monitoring and control are highly adopted. Owing to the comparatively less stringent security controls and widespread availability of HANs, attackers...

WordPress Post Grid Master Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Post Grid Master, which stems from insufficient input cleanup and output escaping, and can be exploited by an...

Large Language Model-Based Framework for Explainable Cyberattack Detection in Automatic Generation Control Systems

The increasing digitization of smart grids has improved operational efficiency but also introduced new cybersecurity vulnerabilities, such as False Data Injection Attacks FDIAs targeting Automatic Generation Control AGC systems. While machine learning ML and deep learning DL models have shown...

Optimal Planning for Enhancing the Resilience of Modern Distribution Systems against Cyberattacks

The increasing integration of IoT-connected devices in smart grids has introduced new vulnerabilities at the distribution level. Of particular concern is the potential for cyberattacks that exploit high-wattage IoT devices, such as EV chargers, to manipulate local demand and destabilize the grid...

CVE-2025-8261

A vulnerability was found in Vaelsys 4.1.0 and classified as critical. This issue affects some unknown processing of the file /grid/vgridserver.php of the component User Creation Handler. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been...

CVE-2025-8260

A vulnerability has been found in Vaelsys 4.1.0 and classified as problematic. This vulnerability affects unknown code of the file /grid/vgridserver.php of the component MD4 Hash Handler. The manipulation of the argument xajaxargs leads to use of weak hash. The attack can be initiated remotely. T...

CVE-2025-8259

A vulnerability, which was classified as critical, was found in Vaelsys 4.1.0. This affects the function executeDataObjectProc of the file /grid/vgridserver.php. The manipulation of the argument xajaxargs leads to os command injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-8260

A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /grid/vgridserver.php of the component Web interface. Performing a manipulation of the argument xajaxargs results in use of weak hash. The attack is possible to be carried out...