1895 matches found
EUVD-2025-18091
Malicious code in bioql PyPI...
EUVD-2022-53166
Malicious code in bioql PyPI...
EUVD-2024-16186
Malicious code in bioql PyPI...
EUVD-2021-9138
Malicious code in bioql PyPI...
A Quantum-Secure Voting Framework Using QKD, Dual-Key Symmetric Encryption, and Verifiable Receipts
Electronic voting systems face growing risks from cyberattacks and data breaches, which are expected to intensify with the advent of quantum computing. To address these challenges, we introduce a quantum-secure voting framework that integrates Quantum Key Distribution QKD, Dual-Key Symmetric...
Security Bulletin: A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30).
Summary A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. Vulnerability Details CVEID:CVE-2024-31486 DESCRIPTION: A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. The affected devices stores MQTT client passwords without sufficient protection o...
Security update for curl
This update for curl fixes the following issues: CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 CVE-2025-10148: Predictable WebSocket mask bsc1249348 Fix the --ftp-pasv option in curl v8.14.1 bsc1246197 tooloperate: fix return code when --retry is used but not triggered...
CVE-2025-9161 Rockwell Automation FactoryTalk Optix Remote Code Execution Vulnerability
A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution...
CVE-2025-9161
CVE-2025-9161 affects the FactoryTalk Optix MQTT broker. The vulnerability stems from insufficient URI sanitization, which allows loading of remote Mosquito plugins and can lead to remote code execution. Documented impact is remote code execution; exploitation details are not provided in the supp...
CVE-2025-55443
Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...
Linux Distros Unpatched Vulnerability : CVE-2018-18764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read...
Linux Distros Unpatched Vulnerability : CVE-2021-41036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket. CVE-2021-41036 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2019-5432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for...
CVE-2025-55443
Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...
Telpo MDM 安全漏洞
Telpo MDM is a mobile device management system from the Chinese company Telpo. A security vulnerability exists in Telpo MDM versions 1.4.6 to 1.4.9, which originates from the plaintext storage of administrator credentials and MQTT server details, and could lead to unauthorized access...
MAL-2025-18042 Malicious code in date-november-mqtt (npm)
The package date-november-mqtt was found to contain malicious code...
MAL-2025-26823 Malicious code in mqtt_plugin (npm)
The package mqttplugin was found to contain malicious code...
Malicious code in date-november-mqtt (npm)
The package date-november-mqtt was found to contain malicious code...
CVE-2025-54465 Hard-coded Credentials Vulnerability in ZKTeco WL20
This vulnerability exists in ZKTeco WL20 due to hard-coded MQTT credentials and endpoints stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve the hard-coded MQTT...