graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie if a guest user has the graph real-time privilege.

This Metasploit module exploits a flaw where an authenticated user with sufficient administrative rights to manage pollers can use this functionality to execute arbitrary commands remotely. Usually, the miscellaneous commands are used by the additional modules (to perform certain actions), by the scheduler for data processing, etc. This module uses this functionality to obtain a remote shell on the target.

DA-WIN, a wireless IDS, provides an organization a continuous wireless scanning capability that is light touch and simple. It utilizes compact and discreet sensors that can easily be deployed reducing the total cost of protection and simplifying the effort required for absolute, categoric regulatory compliance. This archive includes a dd image to be used on a Raspberry Pi and a user manual.

DA-WIN, a wireless IDS, provides an organization a continuous wireless scanning capability that is light touch and simple. It utilizes compact and discreet sensors that can easily be deployed reducing the total cost of protection and simplifying the effort required for absolute, categoric regulatory compliance. This archive includes a dd image to be used on a Raspberry Pi and a user manual.

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.

The FLIR Brickstream 3D+ sensor is vulnerable to unauthenticated config download and file disclosure vulnerability when calling the ExportConfig REST API (getConfigExportFile.cgi). This will enable the attacker to disclose sensitive information and help her in authentication bypass, privilege escalation and/or full system access.

D-Link DIR-859 Routers are vulnerable to OS command injection via the UPnP interface. The vulnerability exists in /gena.cgi (function genacgi_main() in /htdocs/cgibin), which is accessible without credentials.

Lower fertility rates will boost economic growth, according to a demographic model developed by Renaissance Capital. 

It may be safe for a bird to land on a wire, but not on two of them at once.

Germany-based clean-energy fund Hep Kapitalverwaltung AG agreed to invest $50 million to $80 million annually in a partnership to develop small solar projects in the U.S.

California, long a progressive leader on renewable energy and climate change mitigation, has neglected a key market segment for renewable energy: the “community-scale,” or “wholesale distributed generation” (DG), market. This market segment is defined as projects below 20 megawatts that connect to the distribution grid and export power to the grid for sale.

The round was led by Ecosystem Integrity Fund with participation from Equinor Energy Ventures and Evergy Ventures

The Chinese government recently issued a whitepaper on the status and prospects of the hydrogen fuel and fuel cell sectors, indicating that energy derived from hydrogen will become an important part of the Chinese energy network.

RenewableUK highlighted last week that Great Britain’s onshore and offshore wind farms generated more electricity than any other source of power last week.

In a first for the country, Germany generated 54.5 percent of electricity from renewable energy in March 2019. This is according to data collected by the Fraunhofer Institute for Solar Energy Systems.

A new career map, Careers in Climate Control Technology, provides a first-of-its-kind interactive, visual tool to showcase the employment opportunities that exist in the swiftly growing HVAC/R industry – Heating, Ventilation, Air Conditioning and Refrigeration. The sector is on track for projected growth of 15 percent from 2016 to 2026.

Building solar and wind energy projects on potentially contaminated lands can be a golden opportunity, both effective and cost-effective, for developers. The 120-acre Reilly Tar & Chemical Corporation Superfund site was recently redeveloped with a utility-scale solar farm and is a prime example of the reuse potential inherent in thousands of Superfund sites, brownfields, retired power plants, and landfills.

Duke Energy Corp. will develop six utility-scale solar power projects in North Carolina that may cost up to $404 million as part of the state’s bid to boost renewable energy.

Brazil is the second-largest producer of hydroelectric power in the world, after only China, and hydropower accounted for more than 70% of the country’s electricity generation in 2018. Brazil’s latest 10-year energy plan seeks to maintain this level of hydro generation while increasing the share of nonhydro renewables, particularly solar.

The round was led by Ecosystem Integrity Fund with participation from Equinor Energy Ventures and Evergy Ventures

On Monday, global offshore wind leader Ørsted announced that it had entered into an agreement to acquire a 100 percent of Rhode Island-based Deepwater Wind at a purchase price of US $510 million. Deepwater wind built the first U.S. offshore wind farm — the 30-MW Block Island Wind — and is currently constructing two additional facilities off Long Island, New York (South Fork at 90 MW) and Connecticut (Revolution Wind at 600 MW).

The UK could meet a significant slice of carbon emissions’ target if it more widely deployed distributed energy technologies.

Exxon Mobil Corp. will use renewable energy to produce oil in West Texas.

Bloated by debt, bled by corruption and battered by structurally declining sales, South African power utility Eskom Holdings SOC Ltd. is facing what’s known in the industry as a “death spiral.”

Trump's proposed budget severely cuts the EPA and DOE's efficiency and renewables offices, but allocates funding for R&D, clean coal and advanced nuclear.