Blog | DIVD CSIRT

CyberAuditWeb and videx-legacy-ssl full disclosure 31 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in CyberAuditWeb and videx-legacy-ssl

Visioweb.js 30 July 2026, by Victor Pasman

Client-side prototype pollution in Visioweb.js allows attackers to execute XSS on the client system.

Cloudflow 30 July 2026, by Victor Pasman

Multiple vulnerabilities in the Hybrid Software Cloudflow CLOUDFLOW PROOFSCOPE module, including unauthenticated local file inclusion and unauthenticated file upload.

Six vulnerabilities in Enphase IQ Gateway devices 27 July 2026, by Victor Pasman

Six critical vulnerabilities have been discovered in Enphase Envoy solar inverters. DIVD is assisting Enphase with locating vulnerable devices.

White Rabbit Switch full disclosure 17 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in the White Rabbit Switch from CERN

Axiell Iguana CMS full disclosure 17 July 2026, by Victor Pasman

Full disclosure of multiple injection vulnerabilities discovered in Axiell Iguana CMS

Mennekes Smart - charging stations full disclosure 16 July 2026, by Victor Pasman

Full disclosure of five vulnerabilities discovered in the firmware of Mennekes Smart charging stations

SOPlanning Online Planning tool full disclosure 16 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in the SOPlanning Online Planning tool

StealC data available from Operation Endgame S03E04 25 June 2026, by DIVD

DIVD CSIRT is performing victim notification on StealC malware victims from Operation Endgame S03E04

Data available from Operation Endgame S03E01 13 November 2025, by DIVD

DIVD CSIRT is performing victim notification on the stealer logs from Operation Endgame S03E01