CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE Suggested description An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or...

solarview-ics-vulnerability-analysis

SolarView ICS Vulnerability Analysis A cyber-physical threat analysis of the SolarView Compact / Mirai botnet incident, in which attackers exploited CVE-2022-29303 to compromise roughly 800 solar monitoring appliances at Japanese photovoltaic facilities. Course project for ECE 362 — Cyber-Physica...

CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...

Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks

Grid-connected solar distributed energy resources DERs, such as solar inverters and monitoring platforms, have been deployed at unprecedented scale over the past few years, with global solar capacity more than doubling since 2022. To support monitoring and control, many of these systems are...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

Solar-Log 500 2.8.2 - Incorrect Access Control Detection

Solar-Log 500 2.8.2 is susceptible to incorrect access control because the web administration server for Solar-Log 500 all versions prior to 2.8.2 Build 52 does not require authentication, which allows arbitrary remote attackers gain administrative privileges by connecting to the server...

Growatt Shinelink - Login Panel Detection

Growatt Shinelink is a web-based data logger and monitoring interface for Growatt solar inverters, providing real-time solar energy production data and system configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Growatt Shinelink is a web-based data logger and monitoring interface for...

KACO New Energy Solar Inverter - Detect

KACO new energy is a solar inverter manufacturer. Their inverters include a built-in web server that serves compressed HTML over HTTP for monitoring inverter status and energy production data. Devices are commonly deployed on residential and commercial solar installations. !/usr/bin/env python3 -...

Morningstar ProStar MPPT Solar Charge Controller - Detect

Morningstar ProStar MPPT is a solar charge controller with a built-in web server providing live data monitoring for off-grid and industrial solar installations. The exposed interface displays real-time array, battery, and load data without authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Solar-Log - Monitoring Panel Detection

Solar-Log is a solar plant monitoring system by Solare Datensysteme GmbH Germany used for PV system monitoring, yield optimisation, and fault detection. The web interface is commonly exposed on port 80, 81, or non-standard ports. !/usr/bin/env python3 -- coding: utf-8 -- """Solar-Log is a solar...

Fronius Datalogger Web - Login Panel Detection

Fronius Datalogger Web is a web interface for Fronius solar inverter data loggers, providing real-time monitoring and configuration of photovoltaic systems. !/usr/bin/env python3 -- coding: utf-8 -- """Fronius Datalogger Web is a web interface for Fronius solar inverter data loggers, providing...

Fronius Inverter - Login Panel Detection

Fronius Inverter is the web interface for Fronius GEN24 and Symo series solar inverters, providing real-time monitoring, configuration, and energy management for photovoltaic systems. !/usr/bin/env python3 -- coding: utf-8 -- """Fronius Inverter is the web interface for Fronius GEN24 and Symo...

poxiao

PoXiao v3.0.0 Twenty-Four Solar Safety Toolchain — SRC Ho...

Solar appScreener Platform Code Execution

The vulnerability of the Solar appScreener platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

agentmesh-orchestrator (>=0.1.0, <=0.1.7), algoflow (0.1.0) +82 more potentially affected by CVE-2026-48818 via starlette (0.32.0.post1)

starlette PYPI version 0.32.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentmesh-orchestrator =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.0.200, =1.0.401, =0.1.0, =0.1.115 and more Source cves: CVE-2026-48818 Source...

Siemens BluePlanet SQL injection vulnerability

Siemens Blueplanet is a series of solar inverter and energy monitoring products developed by German company Siemens, aimed at photovoltaic power generation and energy storage systems. Several Siemens products have SQL injection vulnerabilities, which stem from improper handling of special element...

[SECURITY] Fedora 44 Update: kstars-3.8.0-6.fc44

KStars is a Desktop Planetarium. It provides an accurate graphical simulation of the night sky, from any location on Earth, at any date and time. The display includes up to 100 million stars, 13,000 deep-sky objects, all 8 planets, the Sun and Moon, and thousands of comets and asteroids...

📄 Solar FTP Server 2.1.1 PASV Denial of Service

Solar FTP Server version 2.1.1 PASV command denial of service proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Solar FTP Server 2.1.1 PASV Command - Deni...

CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms

CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant CHP supplying heat to almost half a million customers in...

PT-2026-7999

Уязвимость платформы Solar appScreener связана с некорректной реализацией механизмов аутентификации отправителя электронной почты. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, позволяющая нарушителю проводить спуфинг атаки...