DRA_writeup

Security vulnerabilities in Oracle DSR KPN CISO REDteam KPN is a telecom operator located in the Netherlands. The CISO REDteam was introduced in 2013 and is KPN’s ethical hacking team. This team is involved in security tests of KPN applications and services to ensure that our customers’ data is...

EUVD-2023-39825

Malicious code in bioql PyPI...

EUVD-2023-47957

Malicious code in bioql PyPI...

EUVD-2025-23810

Malicious code in bioql PyPI...

CVE-2025-21452

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2025-21452

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2025-21452

CVE-2025-21452 describes a transient DoS in Qualcomm modem components on LTE networks, triggered when processing a random-access response with an invalid PDU length. The issue affects the modem’s handling of RAR messages, with a root cause tied to malformed PDU length processing, leading to cessa...

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2025-21452: Reachable Assertion

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

CVE-2023-43551 Improper Authentication in Multi-Mode Call Processor

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

CVE-2023-43551 Improper Authentication in Multi-Mode Call Processor

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

CVE-2023-43551: Improper Authentication

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

PT-2024-13124

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto and other products affected versions not specified Description A cryptographic issue exists while performing attach with a LTE network. This issue allows a rogue base station to skip the authentication phase and...

LTE Network Management System Code Execution Root Privileges

The vulnerability of the microprogramming software used in LTE network management systems like Baicells RTS & RTD exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges by...

PT-2025-32119 · Unknown · Lte Network

Name of the Vulnerable Software and Affected Versions: LTE network affected versions not specified Description: A transient Denial-of-Service DoS condition can occur while processing a random-access response RAR containing an invalid Protocol Data Unit PDU length on an LTE network. A PDU is a uni...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...