CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
🏴‍☠️ Qilin has just published a new victim : fasse.com
Description: Fasse Valves specializes in precision motion control, offering a wide range of hydraulic valves and controls engineered for demanding applications. Their products cater to industries such as agriculture, construction, lawn and turf care, and ...
Source: Ransomware.live
June 11th, 2025 (15 days ago)
🏴‍☠️ Qilin has just published a new victim : bioalleva
Description: Il biologico a piene mani. Definirsi amanti del biologico non basta, bisogna crederci fino in fondo. Per Bioalleva non mai stata semplicemente una tendenza, ma una vera e propria vocazione: rispettare lintegrità del territorio per recuperare ...
Source: Ransomware.live
June 11th, 2025 (15 days ago)
🏴‍☠️ Qilin has just published a new victim : Asefa Insuarance
Description: Founded in Spain in 1972, Asefa was part of the SMABTP group, a leader French insurer in building and civil works in France with more 160 years of experience. In Asefa Seguros they have been committed to the needs of clients and collaborators ...
Source: Ransomware.live
June 11th, 2025 (15 days ago)
ZDI-25-340: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability
Description: This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2025-5822.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-341: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-5823.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-342: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-343: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability
Description: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2025-5824.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-344: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-5825.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-345: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability
Description: This vulnerability allows network-adjacent attackers to inject arbitrary AT commands on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-5826.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)
ZDI-25-346: (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-5827.
Source: Zero Day Initiative Published Advisories
June 11th, 2025 (15 days ago)