CVE-2022-47767

The CVE-2022-47767 issue affects Solar-Log Gateway devices running firmware v4.2.7 through v5.1.1, where a backdoor in the web dashboard allows remote login with super administrator privileges. The vulnerability is rooted in the gateway’s web panel security, enabling unauthenticated remote access...

PT-2023-15480 · Sl 1200 +5 · Sl 1200 +6

Name of the Vulnerable Software and Affected Versions: Solar-Log Gateway products versions v4.2.7 through v5.1.1 Description: A backdoor in Solar-Log Gateway products allows remote access via the web panel, gaining super administration privileges to the attacker. Recommendations: For Solar-Log...

CVE-2022-47767

A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 included. This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300,...

solar-graphics.com Cross Site Scripting vulnerability OBB-3097075

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

solarlights.pl Cross Site Scripting vulnerability OBB-3076845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

summitsolar.com.br Cross Site Scripting vulnerability OBB-2998741

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-1277

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

CVE-2022-1277

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

CVE-2022-1277

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

Sql injection

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

CVE-2022-1277

Inavitas Solar Log is affected by an unauthenticated SQL injection (CVE-2022-1277). The vulnerability affects the Inavitas Solar Log product, with unauthenticated access and potential impact per the CVE entry. Exploitation details are not provided in the documents; MT-level risk assessment is not...

CVE-2022-1277 SQL Injection in Inavitas Solar Log

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

PT-2022-13767

Name of the Vulnerable Software and Affected Versions Inavitas Solar Log affected versions not specified Description The issue is related to an unauthenticated SQL Injection vulnerability in the Inavitas Solar Log product. Recommendations At the moment, there is no information about a newer versi...

Inavitas Solar SQL注入漏洞

Inavitas Solar is a complete management system for solar power plant operators and investors from Inavitas Turkey. A security vulnerability exists in the Inavitas Solar Log product that allows an unauthenticated attacker to perform SQL injection...

solar-solar.com Cross Site Scripting vulnerability OBB-2767109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Solar-system-simulator 路径遍历漏洞

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

Malicious Package

Overview solar-stellarorg-pages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...