93 matches found
EUVD-2023-44732
Malicious code in bioql PyPI...
EUVD-2023-28601
Malicious code in bioql PyPI...
EUVD-2022-36345
Malicious code in bioql PyPI...
EUVD-2021-3616
Malicious code in bioql PyPI...
CVE-2025-51643
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
MAL-2025-10690 Malicious code in @zalastax/nolb-apn (npm)
The package @zalastax/nolb-apn was found to contain malicious code...
Malicious code in @zalastax/nolb-apn (npm)
The package @zalastax/nolb-apn was found to contain malicious code...
PT-2025-33279 · Kuwfi · Kuwfi 4G Ac900 Lte Router
Name of the Vulnerable Software and Affected Versions: KuWFi 4G LTE AC900 router version 1.0.13 Description: The KuWFi 4G LTE AC900 router is susceptible to Cross-Site Request Forgery CSRF on its web management interface. An attacker can deceive an authenticated administrator into performing...
CVE-2023-24586
Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...
ABB M2M Gateway
SUMMARY ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run...
The vulnerability in the usbISP_detail_edit.cgi script of Netgear R7000P router software allows a hacker to induce a service failure.
The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...
CVE-2024-51020
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISPdetailedit.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-29114
System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and credentials. • IPSEC credentials...
NETGEAR R7000P 安全漏洞
The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the apn parameter in the usbISPdetailedit.cgi component that fails to correctly validate the length of the input data, and can be exploited by a remote...
PT-2024-8264
Name of the Vulnerable Software and Affected Versions Netgear R7000P version 1.3.3.154 Description The issue is related to a stack overflow vulnerability in the usbISP detail edit.cgi script, specifically via the apn parameter. This vulnerability can be exploited by sending a crafted POST request...
CVE-2024-51020: Buffer Copy without Checking Size of Input
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISPdetailedit.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-40535
Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apnname3g parameter in the config3gpara function...
PT-2024-28902
Name of the Vulnerable Software and Affected Versions LBT-T300-T400 version 3.2 Description A stack overflow issue was discovered in the config 3g para function via the apn name 3g parameter. Recommendations For version 3.2, consider restricting access to the config 3g para function to minimize t...