Efacec QC 安全漏洞

Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in Efacec QC that stems from a lack of privilege control over user XXX, which could lead to unlimited privilege elevation...

Efacec QC 安全漏洞

Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in the Efacec QC 60/90/120, which stems from a lack of system hardening and could allow an attacker to access files containing plaintext credentials or sensitive information...

Efacec QC 安全漏洞

Efacec QC is a series of electric vehicle charging posts from the Portuguese company Efacec. A security vulnerability exists in the Efacec QC that stems from the device web server access credentials being sent in Base64 encoding via the HTTP header, which is not a strong encryption algorithm, and...

Efacec QC 安全漏洞

Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in the Efacec QC 60/90/120, which originates from a network connection where an attacker could detect plaintext credentials...

Efacec QC 安全漏洞

Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in the Efacec QC 60/90/120 that stems from a service interaction without authentication, which could lead to an attacker obtaining charger information via the OCPP v1.6 protocol...

CVE-2025-60534

creationtimestamp| type| source ---|---|--- 2026-01-06 20:39:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsq6lfni2t 2026-01-06 20:40:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsqxzac22a...

CVE-2025-20800

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:33+00:00| seen| Telegram/IDZM-U-kLaMeLOHSZRXTD9u0IyoQQmgHJLI16VuZIVt-ROU 2026-01-06 20:39:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsqff3sy2p 2026-01-06 20:40:09+00:00| seen|...

CVE-2025-20796

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:20+00:00| seen| Telegram/PFrA7CJJ7CXBjBQDjwjiG1MpgnsXkm-Ij4iFje1tKThixY 2026-01-06 23:03:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbs2qrvadk2a 2026-01-06 23:03:37+00:00| seen|...

CVE-2025-20797

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:20+00:00| seen| Telegram/PFrA7CJJ7CXBjBQDjwjiG1MpgnsXkm-Ij4iFje1tKThixY 2026-01-06 23:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbs2qygjae2m 2026-01-06 23:03:45+00:00| seen|...

CVE-2025-20795

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:05+00:00| seen| Telegram/Th7Utg6Z4ZIZZKA-EPC2QNOtDArtNoryDFgV1KwfSaAIYk 2026-01-06 20:13:20+00:00| seen| Telegram/PFrA7CJJ7CXBjBQDjwjiG1MpgnsXkm-Ij4iFje1tKThixY 2026-01-06 23:02:57+00:00| seen|...

CVE-2025-20793

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:05+00:00| seen| Telegram/Th7Utg6Z4ZIZZKA-EPC2QNOtDArtNoryDFgV1KwfSaAIYk 2026-01-06 20:39:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsqm5uq42b 2026-01-06 20:40:17+00:00| seen|...

CVE-2025-15385

creationtimestamp| type| source ---|---|--- 2026-01-06 20:12:14+00:00| seen| Telegram/6OL89cpRslOHL-aENukC5v1ERxWP66BqmlZtpFFOmhWjE 2026-01-07 00:30:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbs7mcbdwc2u 2026-01-07 00:31:01+00:00| seen|...

CVE-2025-20760

creationtimestamp| type| source ---|---|--- 2026-01-06 20:12:14+00:00| seen| Telegram/6OL89cpRslOHL-aENukC5v1ERxWP66BqmlZtpFFOmhWjE 2026-01-07 00:30:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbs7miq32i2g 2026-01-07 00:31:11+00:00| seen|...

CVE-2025-39477

creationtimestamp| type| source ---|---|--- 2026-01-06 18:07:43+00:00| seen| Telegram/2JFIlsludB2BcoY20V82c0ESHPbtXQoup4wpLAPUk9R9uuY 2026-01-06 18:12:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrkimsf7d22 2026-01-06 18:32:18+00:00| seen|...

CVE-2025-69083

creationtimestamp| type| source ---|---|--- 2026-01-06 17:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhoxpbzc2f 2026-01-06 17:22:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhpzy6en2u 2026-01-06 18:07:43+00:00| seen|...

CVE-2025-68033

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

CVE-2025-13812 GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

CVE-2025-13215 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.17.13 via the auxelsajaxsearch due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers...

CVE-2025-13215

CVE-2025-13215 : Information exposure in WordPress plugin “Shortcodes and extra features for Phlox theme” allows unauthenticated users to view draft post titles via auxels_ajax_search in all versions up to 2.17.13. Patch released in 2.17.13 (remediation noted). Base CVSS 3.1/3.1 vector indicates ...

CVE-2025-14996

creationtimestamp| type| source ---|---|--- 2026-01-06 05:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqanetrfw2p 2026-01-06 06:01:28+00:00| seen| Telegram/C8cKa5CH9I3NM3jeEU5QbxYCnFxc-EFqHQ9i2kT9Led6pw 2026-01-06 07:32:43+00:00| seen|...