21 matches found
EUVD-2025-7606
Malicious code in bioql PyPI...
EUVD-2025-7607
Malicious code in bioql PyPI...
EUVD-2025-7610
Malicious code in bioql PyPI...
EUVD-2025-7609
Malicious code in bioql PyPI...
EUVD-2025-7608
Malicious code in bioql PyPI...
CVE-2025-22370
Many fields for the web configuration interface of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to execute arbitrary SQL commands because the values are insufficiently neutralized...
CVE-2025-22369
The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS...
CVE-2025-22368
The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22366
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22369
The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS...
CVE-2025-22366
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22367
The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22368
The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22369
The CVE-2025-22369 vulnerability affects Mennekes Smart/Premium charging points firmware. The ReadFile endpoint can be abused to read arbitrary files from the underlying OS, with impact on confidentiality described as HIGH. Affected versions are firmware prior to 2.15; a fixed release 2.15 exists...
CVE-2025-22369 Mennekes smart/premium charges systems, Arbitrary file download using ReadFile endpoint
The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS...
CVE-2025-22366 Mennekes smart/premium charges systems, Command injection in firmware upgrade
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...
CVE-2025-22366
CVE-2025-22366 affects Mennekes Smart/Premium Chargingpoints firmware update capability. The issue is in the authenticated firmware update flow where OS commands are improperly neutralized when certain fields reach the underlying OS, enabling potential command execution. The documented impact (pe...
CVE-2025-22370
CVE-2025-22370 affects Mennekes Smart / Premium chargingpoints firmware web configuration interface. The vulnerability arises from insufficient input neutralization in multiple web config fields, allowing an attacker to execute arbitrary SQL commands. The issue is associated with firmware version...
CVE-2025-22367
The CVE-2025-22367 affects Mennekes Smart/Premium Chargingpoints firmware. The issue arises from theAuthenticated time setting capability, where OS commands are not properly neutralized when certain fields reach the underlying OS, enabling potential command execution. Documented in Multiple sourc...
CVE-2025-22367 Mennekes smart/premium charges systems, Command injection in time setting
The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...