664 matches found
CVE-2022-24449
CVE-2022-24449 Solar Appscreener XXE 建议描述 在 Solar AppScreener SAST 工具至 3.10.4 版本中发现一个问题。未授权的攻击者可能利用安装了受影响版本的主机，通过上传特制的 XML 文件到主机（这些主机的许可证已过期或未安装），从而进行攻击。最低确认的影响是 XXE-SSRF。 附加信息 已在 3.10.4 版本中修复 漏洞类型 CWE-611：XML外部实体引用限制不当 供应商 SOLAR SECURITY LLC https://en.rt-solar.ru/ 受影响产品代码库 受影响版本：Solar Appscreen...
CVE-2023-33869-RCE-PoC
能源安全与可靠性中心 - UNC Charlotte CVE-2023-33869 是一个命令注入漏洞，影响 Enphase Envoy 固件版本 D7.0.88。该漏洞允许攻击者在受影响设备上以 root 权限注入并执行任意命令。Enphase Envoy 是一种太阳能微型逆变器网关设备，通常部署在住宅和商业太阳能系统中，这使得该漏洞对关键基础设施和物联网环境尤其令人担忧。...
solarview-ics-vulnerability-analysis
Análisis de Vulnerabilidades de SolarView ICS Un análisis de amenazas ciberfísicas del incidente del botnet SolarView Compact / Mirai, en el que los atacantes explotaron CVE-2022-29303 para comprometer aproximadamente 800 dispositivos de monitoreo solar en instalaciones fotovoltaicas japonesas...
Siemens blueplanet SQL注入漏洞
Siemens Blueplanet is a series of solar inverter and energy monitoring products developed by German company Siemens, aimed at photovoltaic power generation and energy storage systems. Several Siemens products have SQL injection vulnerabilities, which stem from improper handling of special element...
[SECURITY] Fedora 44 Update: kstars-3.8.0-6.fc44
KStars is a Desktop Planetarium. It provides an accurate graphical simulation of the night sky, from any location on Earth, at any date and time. The display includes up to 100 million stars, 13,000 deep-sky objects, all 8 planets, the Sun and Moon, and thousands of comets and asteroids...
📄 Solar FTP Server 2.1.1 PASV Denial of Service
Solar FTP Server version 2.1.1 PASV command denial of service proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Solar FTP Server 2.1.1 PASV Command - Deni...
CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms
CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant CHP supplying heat to almost half a million customers in...
CVE-2018-12735
SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverterinfo.htm or englishmain.htm URI...
CVE-2021-22953
A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team"...
CVE-2022-31537
The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2019-11367
An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully...
EUVD-2025-176288
Malicious code in solarnebula-testcafe-redshift-isostasy npm...
EUVD-2025-116945
Malicious code in solarhummingbirdz3n npm...
Malicious code in solar_possum_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ce28db956becae99b26783a15bc8a83754297385c30e221e7976dba2ff7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102135
Malicious code in solarpossumz3n npm...
MAL-2025-130270 Malicious code in solar_possum_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ce28db956becae99b26783a15bc8a83754297385c30e221e7976dba2ff7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in solar_swordfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f02caf230ee2b1cf54a7a6d786378b47c13be2888e1ef7e5ad2eeece32914c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-94969
Malicious code in solarswordfishz3n npm...
Malicious code in solar_rhinoceros-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...