VulnCheck KEV: CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

Hardy Barth Salia EV Charge Controller (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

EUVD-2025-29099

Malicious code in bioql PyPI...

EUVD-2025-16093

Malicious code in bioql PyPI...

EUVD-2025-16097

Malicious code in bioql PyPI...

EUVD-2025-17455

Malicious code in bioql PyPI...

EUVD-2024-33943

Malicious code in bioql PyPI...

PT-2025-37390

Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth Salia PLCC version 2.2.0 Description: A security flaw exists in eCharge Hardy Barth Salia PLCC 2.2.0 related to unrestricted upload. The issue affects processing of the file /api.php. Manipulation of the setrfidlist argume...

CVE-2025-10371: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from remote. The exploit has been released ...

CVE-2025-5873

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely...

CVE-2025-5873

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely...

CVE-2025-5873 eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely...

CVE-2025-5873 eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely...

CVE-2025-5873

CVE-2025-5873 affects the eCharge Hardy Barth Salia PLCC Web UI, with the vulnerable code path in the /firmware.php file. The issue arises from improper handling of the media parameter, allowing unrestricted file upload and enabling remote exploitation. Public exploit details exist, and multiple ...

eCharge Hardy Barth Salia PLCC code issue vulnerability

The eCharge Hardy Barth Salia PLCC is a charging post controller from eCharge Germany. A code issue vulnerability exists in eCharge Hardy Barth Salia PLCC version 2.2.0, which stems from an incorrect manipulation of the parameter media in the file /firmware.php resulting in an unrestricted upload...

PT-2025-24421

Name of the Vulnerable Software and Affected Versions eCharge Hardy Barth Salia PLCC version 2.2.0 Description A critical issue affects the Web UI component, specifically the /firmware.php file, allowing for unrestricted upload by manipulating the media argument. This can be initiated remotely. T...

CVE-2025-5873: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely...

CVE-2023-46360

Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges...

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

CVE-2025-3883

eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this...