EUVD-2025-11086

Malicious code in bioql PyPI...

CVE-2025-31357

An unauthenticated attacker can obtain a user's plant list by knowing the username...

CVE-2025-31357

An unauthenticated attacker can obtain a user's plant list by knowing the username...

CVE-2025-31357

An unauthenticated attacker can obtain a user's plant list by knowing the username...

CVE-2025-31357 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can obtain a user's plant list by knowing the username...

CVE-2025-31357

CVE-2025-31357 affects Growatt Cloud Applications (cloud portal). The connected documents describe an information-disclosure vulnerability where an unauthenticated attacker can obtain a user’s plant list by knowing the username. Evidence of the issue appears across multiple sources (CVE lists, CN...

CVE-2025-31357 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can obtain a user's plant list by knowing the username...

CVE-2025-31357: Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can obtain a user's plant list by knowing the username...

Growatt Cloud Applications security vulnerabilities

Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain a user's plant list by username...

PT-2025-16472

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a user's plant list by knowing the username. Recommendations At the moment, there is no information about a newer version that contains a fix for this...