Physical-Layer Signal Injection Attacks on EV Charging Ports: Bypassing Authentication Via Electrical-Level Exploits

The proliferation of electric vehicles in recent years has significantly expanded the charging infrastructure while introducing new security risks to both vehicles and chargers. In this paper, we investigate the security of major charging protocols such as SAE J1772, CCS, IEC 61851, GB/T 20234, a...

CVE-2025-23169

The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input provided for these customizations is not properly validated or sanitized, allowing a malicious user to inject and store cross-site scripting XSS...

GHSA-8XFC-GM6G-VGPV

creationtimestamp| type| source ---|---|--- 2025-06-17 12:50:41+00:00| seen| https://gist.github.com/safer-bot/36bcd7e69e4c991c665db68dfffc1c7c 2025-07-07 03:46:51+00:00| seen| https://gist.github.com/safer-bot/ef436e86b0754e088500571855bb0c22 2025-07-07 04:14:23+00:00| seen|...

Fedora 42 : valkey (2025-129268f8e4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-129268f8e4 advisory. Fix CVE-2025-49112 ---- Fix CVE-2025-49112 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

SUSE: Security Advisory (SUSE-SU-2025:01884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-4666

creationtimestamp| type| source ---|---|--- 2025-06-11 05:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcpumc6v42m...

CVE-2020-35198

creationtimestamp| type| source ---|---|--- 2025-06-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02 2025-06-05 20:03:53+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lqv4ihty3q22...

CVE-2025-4797

creationtimestamp| type| source ---|---|--- 2025-06-03 04:59:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoizzx5gjm2 2025-06-03 05:00:21+00:00| seen| Telegram/YQh-UDv8jIf7W26Mx1ObULpfId3YafRiCK8KhxFRRwhCXok 2026-04-08...

GHSA-J8R3-CGHJ-9JHG vulnerabilities

Vulnerabilities for packages: python...

Debian: Security Advisory (DLA-4193-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dsa-5932 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5932 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5932-1 [email protected] https://www.debian.org/securit...

Ubuntu: Security Advisory (USN-7537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5174 erdogant pypickle pypickle.py load deserialization

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

CVE-2025-5114

creationtimestamp| type| source ---|---|--- 2025-05-23 17:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu5eeehbp2m...

CVE-2024-3144

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtmlspec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclos...

CVE-2021-29202

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H...

CVE-2020-36493

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mediamain.php via the activepath, keyword, tag, fmdo=x, CKEditor and CKEditorFuncNum parameters...

SUSE: Security Advisory (SUSE-SU-2025:01627-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5002

creationtimestamp| type| source ---|---|--- 2025-05-20 22:40:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17094 2025-05-20 23:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mr4g5x2w...

CVE-2025-24183

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16882 2025-05-19 17:13:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zajzam2e...