158 matches found
CVE-2025-8805 Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service
A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smfgsmstatewaitpfcpdeletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2025-8805 Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service
A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smfgsmstatewaitpfcpdeletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2025-8804 Open5GS AMF ngap_build_downlink_nas_transport assertion
A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngapbuilddownlinknastransport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-8802
A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smfstateoperational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been...
CVE-2025-8802 Open5GS SMF smf-sm.c smf_state_operational denial of service
A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smfstateoperational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been...
CVE-2025-8802 Open5GS SMF smf-sm.c smf_state_operational denial of service
A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smfstateoperational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been...
CVE-2025-8800 Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of service
A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...
CVE-2025-8800
CVE-2025-8800 affects Open5GS up to 2.7.5, specifically the AMF Component. The vulnerability resides in the function esm_handle_pdn_connectivity_request in src/mme/esm-handler.c, and manipulation of this function can cause a denial of service. The issue can be exploited remotely. A fix is availab...
PT-2025-32476 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.6 Description: A problematic issue was identified in Open5GS. The vulnerability affects the smf state operational function within the src/smf/smf-sm.c file of the SMF component. Manipulation of the argument strea...
PT-2025-32474 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.5 Description: A vulnerability exists in Open5GS that can lead to a denial of service. The issue affects the esm handle pdn connectivity request function within the AMF Component, specifically in the...
CVE-2025-54612
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability...
GHSA-8J63-96WH-WH3J 1Panel agent certificate verification bypass leading to arbitrary command execution
Project Address: Project Address 1Panel Official website: https://www.1panel.cn/ Time: 2025 07 26 Version: 1panel V2.0.5 Vulnerability Summary - First, we introduce the concepts of 1panel v2 Core and Agent. After the new version is released, 1panel adds the node management function, which allows...
PT-2025-25738 · Unknown · Miliaris Amigdala
Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the data resource management function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. Recommendations: For...
CVE-2025-44091
yangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting XSS via the role management function...
CVE-2025-44091
The CVE-2025-44091 entry documents a Cross Site Scripting (XSS) vulnerability in yangyouwang crud v1.0.0, exploitable via the role management function. Affected software/component: yangyouwang crud (v1.0.0). Root cause details are not fully disclosed in the provided materials, but multiple source...
CVE-2024-25009
Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...
CVE-2024-44572
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...
CVE-2024-51229
Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function...