Badranh

Unauthenticated WebSocket Access in SteVe v3.7.1 Enables Remote Command Execution

Summary

A critical vulnerability in the SteVe (v3.7.1) Open Charge Point Central System allows unauthenticated remote attackers to establish a WebSocket connection and issue arbitrary OCPP (Open Charge Point Protocol) requests. This flaw permits attackers to execute commands without authentication, leading to unauthorized access and manipulation of EV charging operations.

References

1. GitHub Issue #1546 ( steve-community/steve#1546 )

Badranh

public interface BaseViewHolder {

    interface Binder<T>{
        void bindViewHolders(T viewHolder,int pos);
        int getViewHoldersCount();
    }

}

Badranh

import android.view.LayoutInflater;
import android.view.View;
import android.view.ViewGroup;

import androidx.annotation.LayoutRes;
import androidx.annotation.NonNull;
import androidx.recyclerview.widget.RecyclerView;
import static androidx.recyclerview.widget.RecyclerView.*;