20228 matches found
Schneider Electric Modicon M241, M251, and M262
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Schneider Electric EcoStruxure Data Center Expert
GENERAL SECURITY RECOMMENDATIONS Schneider Electric strongly recommends the following industry cybersecurity best practices: Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized...
KLA90927 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26123 Exploitation CVE list CVE-2026-26123 high Solution Install necessary updates from t...
PT-2026-24282
Interested in USB Airgap? Soon a detail description of CVE-2026-24288. This vulnerability in the Windows Mobile Broadband driver could allow an attacker to execute code. Ability to send unsolicited events from the USB device to the host is the entry point. Stay tuned! 😉...
PT-2026-24878
🚨 CVE-2026-3930 Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium 🎖@cveNotify...
PT-2026-24216
Name of the Vulnerable Software and Affected Versions Heliox Flex 180 kW EV Charging Station versions prior to F4.11.1 Heliox Mobile DC 40 kW EV Charging Station versions prior to L4.10.1 Description The charging stations have improper access control. This could allow an attacker to reach...
Microsoft Windows Mobile Broadband Driver 安全漏洞
The Microsoft Windows Mobile Broadband Driver is a driver program developed by Microsoft Corporation. It enables communication between the Windows operating system and mobile broadband devices. There are security vulnerabilities present in the Microsoft Windows Mobile Broadband Driver. Attackers...
Siemens Heliox Flex 180 kW EV Charging Station和Siemens Heliox Mobile DC 40 kW EV Charging Station 安全漏洞
The Heliox Flex 180 kW EV Charging Station is a modular DC fast charging device in the Heliox series from Siemens.Heliox Mobile DC 40 kW EV Charging Station is a portable, plug-and-play fast charging device for electric vehicles from the Heliox brand of Siemens. The Heliox Mobile DC 40 kW EV...
EUVD-2026-10338
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability affects Focus for iOS...
CVE-2026-2919
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability affects Focus for iOS...
CVE-2026-2919
CVE-2026-2919 affects Focus for iOS. The issue arises from malicious scripts manipulating navigation and iframe behavior to display attacker-controlled or spoofed content under a trusted domain without user interaction. Impact stated as UI could present a spoofed domain; vulnerability fixed in Fo...
CVE-2026-3674
CVE-2026-3674 affects Freedom Factory dGEN1 (up to 20260221) via the FakeAppProvider in org.ethosmobile.ethoslauncher. Manipulation of the component yields improper authorization, with the attack exploitable from a local position. The exploit has been released publicly. Impact is described as par...
WordPress MDJM Event Management plugin <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion vulnerability
Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Mobile DJ Manager versions = 1.7.8.1...
Freedom Factory dGEN1 授权问题漏洞
The Freedom Factory dGEN1 is a Ethereum mobile device developed by the Freedom Factory company. Versions of the Freedom Factory dGEN1 dated 20260221 and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect handling of the com.dgen.alarm component, which may lead t...
Freedom Factory dGEN1 授权问题漏洞
The Freedom Factory dGEN1 is a Ethereum mobile device produced by the Freedom Factory company. Versions of Freedom Factory dGEN1 dated back to 20260221 and earlier contained an authorization issue vulnerability. This vulnerability stemmed from incorrect operations on the FakeAppReceiver function...
EUVD-2026-9834
Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Client login, peer authentication modules allows Reusing Session IDs aka Session Replay. Thi...
CVE-2026-21786 HCL Sametime for iOS is affected by sensitive information disclosure
HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs...
PT-2026-23375
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through = 2.3...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege bypass vulnerability exists in the Huawei EMUI and Huawei HarmonyOS system service framework, which c...
