2096 matches found
EUVD-2024-17593
Malicious code in bioql PyPI...
EUVD-2024-27229
Malicious code in bioql PyPI...
EUVD-2024-27231
Malicious code in bioql PyPI...
EUVD-2025-31182
Malicious code in bioql PyPI...
EUVD-2025-1751
Malicious code in bioql PyPI...
EUVD-2024-17592
Malicious code in bioql PyPI...
Unitree多款产品 安全漏洞
Unitree Go2 is a robot dog, Unitree G1 is a humanoid robot, and Unitree H1 is a humanoid robot. A security vulnerability exists in various Unitree products that originates from the acceptance of an arbitrary handshake key containing a substring of unitree. The following products and versions are...
CVE-2025-10962
The CVE-2025-10962 affects Wavlink NU516U1 M16U1_V240425. The flaw occurs in the SetName Page, function sub_403198, where manipulation of the mac_5g argument in /cgi-bin/wireless.cgi enables remote command injection. Public exploit is available, and the vendor was contacted without response. CVSS...
CVE-2025-10962 Wavlink NU516U1 SetName wireless.cgi sub_403198 command injection
A vulnerability was identified in Wavlink NU516U1 M16U1V240425. This impacts the function sub403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac5g leads to command injection. It is possible to initiate the attack remotely. The exploit is...
CVE-2025-60019
The CVE pertains to glib-networking’s OpenSSL backend, where memory allocation return values are not properly checked. This can allow an out-of-memory condition to lead to writing to an invalid memory location. Several OSV advisories (OESA-2025-2832, 2831, 2830, 2399, 2398, 2397) explicitly docum...
Wavlink NU516U1 命令注入漏洞
Wavlink NU516U1 is a wireless print server from China Ruiyin Wavlink. A command injection vulnerability exists in the Wavlink NU516U1 M16U1V240425 version, which stems from the incorrect operation of the parameter mac5g in the file /cgi-bin/wireless.cgi, which could lead to a remote command...
PT-2025-39438
Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 M16U1 V240425 affected versions not specified Description A flaw exists in the SetName Page component of the Wavlink NU516U1 M16U1 V240425. The issue resides within the sub 403198 function of the /cgi-bin/wireless.cgi file...
CLSA-2025-1758709468 glib2: Fix of CVE-2020-35457
CVE-2020-35457: fix integer overflow in goptiongroupaddentries to prevent potential out-of-bounds write - Bug775510: avoid calling Standard C string/array functions with NULL arguments...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
CVE-2025-39856
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev In the TX completion packet stage of TI SoCs with CPSW2G instance, which has single external ethernet port, ndev is accessed without being initialized if no...
Cross-Service Token: Finding Attacks in 5G Core Networks
5G marks a major departure from previous cellular architectures, by transitioning from a monolithic design of the core network to a Service-Based Architecture SBA where services are modularized as Network Functions NFs which communicate with each other via standard-defined HTTP-based APIs called...
LB-Link BL-CPE300M AX300 4G LTE Router 安全漏洞
LB-Link BL-CPE300M AX300 4G LTE Router is a router from China Bilink LB-Link. A security vulnerability exists in the LB-Link BL-CPE300M AX300 4G LTE Router that stems from improper session handling, which could lead to authentication bypass...
