EUVD-2025-4577

Malicious code in bioql PyPI...

CVE-2024-34520: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

CVE-2024-34521: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an administrative user to access system files with the file permissions of the privileged system user running the application...

Mavenir SCE Application Provisioning Portal 安全漏洞

Mavenir SCE Application Provisioning Portal is an application provisioning portal from Mavenir USA. A security vulnerability exists in the Mavenir SCE Application Provisioning Portal PORTAL-LBS-R10240 version, which originates from a client-side access control bypass that results in unauthorized...

PT-2025-6644

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0 Description The issue concerns an authorization bypass in the Mavenir SCE Application Provisioning Portal. This allows an authenticated 'guest' user to perform...

Circutor COMPACT DC-S BASIC 安全漏洞

Circutor COMPACT DC-S BASIC is a compact DC concentrator from Circutor Spain. A security vulnerability exists in Circutor COMPACT DC-S BASIC CIRCDCv1.2.17 version, which originates from a buffer overflow in the firewall function of the provisioning management portal. An attacker could send a long...

OpenMind Message-OS Portal Login Brute Force Utility

This module scans for OpenMind Message-OS provisioning web login portal, and performs a login brute force attack to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...