22 matches found
Exploit for Code Injection in Mesop-Dev Mesop
CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules...
CVE-2026-33057
Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explicit web endpoint inside the ai/ testing module infrastructure directly ingests untrusted Python code strings unconditionally without authentication measures, yielding standard...
CVE-2026-33057
creationtimestamp| type| source ---|---|--- 2026-03-17 20:58:18+00:00| published-proof-of-concept| https://github.com/mesop-dev/mesop/security/advisories/GHSA-gjgx-rvqr-6w6v 2026-03-20 07:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33057 2026-03-...
CVE-2025-33057 Windows Local Security Authority (LSA) Denial of Service Vulnerability
...
CVE-2025-33057
creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 23:33:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18028...
CVE-2023-33057
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2024-33057
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057
creationtimestamp| type| source ---|---|--- 2024-09-02 15:33:11+00:00| seen| https://t.me/cvedetector/4627...
CVE-2024-33057
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057
CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...
CVE-2023-33057
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-33057 Improper Input Validation in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-33057 Improper Input Validation in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-33057
CVE-2023-33057 relates to a Transient DoS in Qualcomm’s Multi-Mode Call Processor when processing UE policy containers. Connected sources describe the issue as an Improper Input Validation flaw in the Multi-Mode Call Processor, affecting Qualcomm closed‑source components. Impact per the CVSS info...
CVE-2021-33057
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
CVE-2021-33057
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
CVE-2021-33057
The CVE-2021-33057 entry concerns Tencent QQ version 8.7.1 on Android and iOS. The issue is that QQ does not enforce location permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) when determining the device’s physical location. An attacker can use qq.createMapContext to instant...