87 matches found
eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2 信任管理问题漏洞
The eCharge Hardy Barth cPH2 and eCharge Hardy Barth cPP2 are both an electric vehicle charging station from eCharge. A trust management issue vulnerability exists in eCharge Hardy Barth cPH2 and eCharge Hardy Barth cPP2, which stems from the use of hard-coded credentials in the web interface...
PT-2025-22342
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue concerns hard-coded password hashes for the operating system "root" user, which are shipped with update files and cannot be deleted or changed by end-users. An attacker can use these...
PT-2025-17683 · Unknown · Echarge Hardy Barth Cph2
Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth cPH2 affected versions not specified Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is no...
PT-2025-17684 · Unknown · Echarge Hardy Barth Cph2
Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth cPH2 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not requir...
(0Day) eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the dest parameter provided to the...
(0Day) eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the ntp parameter provided to the...
(0Day) eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET parameters provided to the...
PT-2025-17685 · Echarge · Echarge
Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth cPH2 affected versions not specified Description: The issue is related to a command injection remote code execution problem. It affects the index.php file. Recommendations: At the moment, there is no information about a...
CVE-2024-11665
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in hardy-barth cph2echargefirmware allows OS Command Injection.This issue affects cph2echargefirmware: through 2.0.4...
CVE-2024-11665 Unauthenticated Remote Command Injection
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in hardy-barth cph2echargefirmware allows OS Command Injection.This issue affects cph2echargefirmware: through 2.0.4...
CVE-2024-11665 Unauthenticated Remote Command Injection
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in hardy-barth cph2echargefirmware allows OS Command Injection.This issue affects cph2echargefirmware: through 2.0.4...
CVE-2024-45453
Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect jf3-maintenance-mode.This issue affects Maintenance Redirect: from n/a through = 2.0.1...
CVE-2024-45453
CVE-2024-45453 concerns the WordPress Maintenance Redirect plugin ≤ 2.0.1. The vulnerability is an Authentication Bypass by Spoofing that enables accessing functionality not properly constrained by ACLs. Affected software: Maintenance Redirect versions n/a through 2.0.1. Impact per sources: unaut...
CVE-2024-45453 WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability
Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect jf3-maintenance-mode.This issue affects Maintenance Redirect: from n/a through = 2.0.1...
hardy-king.com Cross Site Scripting vulnerability OBB-3945317
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Hardy Barth eCharge charging station’s web application stems from the failure to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.
The vulnerability of the Hardy Barth eCharge charging station’s web application exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially...
The vulnerability of the Hardy Barth eCharge web application, related to errors in privilege management, allows a perpetrator to escalate their privileges.
The vulnerability of the Hardy Barth eCharge charging station’s web application is related to errors in privilege management. Exploiting this vulnerability allows a remote attacker to increase their privileges...
CVE-2023-46360
Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges...
CVE-2023-46359
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...