EUVD-2025-5899

Malicious code in bioql PyPI...

EUVD-2025-25451

Malicious code in bioql PyPI...

EUVD-2025-24006

Malicious code in bioql PyPI...

EUVD-2025-21206

Malicious code in bioql PyPI...

EUVD-2021-33966

Malicious code in bioql PyPI...

EUVD-2024-54127

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2025-1530

Malicious code in bioql PyPI...

EUVD-2025-13394

Malicious code in bioql PyPI...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper validation of the 5GS mobile identity by the AMF in the Registration Request. An attacker can cause a slice reference overflow by sending specially crafted input data. Remediation Upgrade...

PT-2025-39188

Name of the Vulnerable Software and Affected Versions Free5gc version 4.0.1 Description The AMF component contains a buffer overflow issue due to incorrect validation of the 5GS mobile identity, leading to a slice reference overflow. Recommendations At the moment, there is no information about a...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...

CVE-2025-56394

CVE-2025-56394 affects Free5gc 4.0.1. The AMF’s improper validation of the 5GS mobile identity enables a Buffer Overflow, described as a slice reference overflow. Impact is a high-severity memory corruption issue (CVSS 7.5, Network attack, no user interaction). Exploitation details are not provid...

CVE-2025-52395

An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint that fails to validate the identity of the requester properly...

CVE-2025-52395

An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint that fails to validate the identity of the requester properly...

PT-2025-34234 · Unknown · Roadcute Api

Name of the Vulnerable Software and Affected Versions: Roadcute API version 1 Description: An issue in the application allows a remote attacker to execute arbitrary code via an insecure password reset API endpoint. The endpoint fails to validate the identity of the requester properly...

CVE-2025-52395

CVE-2025-52395 affects Roadcute API v1. The vulnerability arises from an insecure password-reset endpoint that fails to validate the requester’s identity, enabling a remote attacker to execute arbitrary code. The issue is rated CVSS v3.1: 9.8 (CRITICAL) with network attack, no privileges required...

CVE-2025-7722

The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1. This is due to the plugin not properly validating a user's identity prior to updating their user meta information in the updateusermeta function. This makes it possible for...