Blog | DIVD CSIRT

It was a matter of when, not if... 24 September 2026, by DIVD

We are the hackers that got hacked

Sungrow web portal full disclosure 19 August 2026, by Victor Pasman

Full disclosure of a vulnerability discovered in the Sungrow web portal

CyberAuditWeb and videx-legacy-ssl full disclosure 31 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in CyberAuditWeb and videx-legacy-ssl

Visioweb.js 30 July 2026, by Victor Pasman

Client-side prototype pollution in Visioweb.js allows attackers to execute XSS on the client system.

Cloudflow 30 July 2026, by Victor Pasman

Multiple vulnerabilities in the Hybrid Software Cloudflow CLOUDFLOW PROOFSCOPE module, including unauthenticated local file inclusion and unauthenticated file upload.

Six vulnerabilities in Enphase IQ Gateway devices 27 July 2026, by Victor Pasman

Six critical vulnerabilities have been discovered in Enphase Envoy solar inverters. DIVD is assisting Enphase with locating vulnerable devices.

White Rabbit Switch full disclosure 17 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in the White Rabbit Switch from CERN

Axiell Iguana CMS full disclosure 17 July 2026, by Victor Pasman

Full disclosure of multiple injection vulnerabilities discovered in Axiell Iguana CMS

Mennekes Smart - charging stations full disclosure 16 July 2026, by Victor Pasman

Full disclosure of five vulnerabilities discovered in the firmware of Mennekes Smart charging stations

SOPlanning Online Planning tool full disclosure 16 July 2026, by Victor Pasman

Full disclosure of multiple vulnerabilities discovered in the SOPlanning Online Planning tool