3973 matches found
New cybersecurity rules for smart heat pump manufacturers
TL;DR Smart heat pumps face new UK cybersecurity rules Must meet ETSI EN 303 645 under the Smart Secure Electricity Systems programme Applies to most domestic heat devices up to 45 kW Compliance deadline expected to be late 2026 / early 2027 Aims to protect consumers, data, and the national grid...
CVE-2025-46737
CVE-2025-46737 relates to Schweitzer Engineering Laboratories SEL-5037 Grid Configurator. Connected PT Security entry specifies vulnerable versions: SEL-5037 Grid Configurator
CVE-2025-46737 Origin Validation Error
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing CORS configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources...
CVE-2025-46737 Origin Validation Error
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing CORS configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources...
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 安全漏洞
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage, and deploy settings for SEL power system equipment. A security...
CVE-2025-46737: Origin Validation Error
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing CORS configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources...
CVE-2025-46503
Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...
WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin Simple Google Photos Grid versions = 1.5...
CVE-2025-46503
Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...
CVE-2025-46503 WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...
CVE-2025-46503
CVE-2025-46503 is a Server-Side Request Forgery (SSRF) vulnerability in the WordPress plugin Simple Google Photos Grid (josheli) affecting versions ≤ 1.5. The public records describe an SSRF issue but do not disclose attack vectors or exploitation details in the provided documents. CVSS v3.1 base...
CVE-2025-46503 WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...
SUSE CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...
CVE-2025-46503: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...
WordPress plugin Simple Google Photos Grid 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-17809 · Unknown · Josheli Simple Google Photos Grid
Name of the Vulnerable Software and Affected Versions: josheli Simple Google Photos Grid versions 1.5 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions 1.5 and earlier,...
CVE-2025-1054: Improper Neutralization of Input During Web Page Generation
The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the UI Counter, UI Icon Box, UI Testimonial Slider, UI Testimonial Grid, and UI Testimonial Carousel widgets in all versions up to, and including, 1.0.16 due to...
CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...
