CVE-2025-63228

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /uploadfile.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file e.g., a PHP webshell to the server. The uploade...

PT-2025-47402

Name of the Vulnerable Software and Affected Versions Mozart FM Transmitter version WEBMOZZI-00287 Description The Mozart FM Transmitter web management interface contains an unauthenticated file upload issue. An attacker can exploit this by sending a crafted POST request with a malicious file to...

DB Electronica Mozart FM Transmitter 安全漏洞

DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from DB Electronica, Italy. A security vulnerability exists in the DB Electronica Mozart FM Transmitter version WEBMOZZI-00287, which originates from the presence of an unrestricted file upload in the...

CVE-2025-63228

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /uploadfile.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file e.g., a PHP webshell to the server. The uploade...

CVE-2025-63228

CVE-2025-63228 affects Mozart FM Transmitter web management interface, version WEBMOZZI-00287. The vulnerability is an unauthenticated file upload in the /upload_file.php endpoint. A crafted POST with a malicious file (for example a PHP webshell) is stored in /upload/, enabling remote code execut...

CVE-2025-63229

CVE-2025-63229 affects Mozart FM Transmitter WEBMOZZI-00287. It is a reflected XSS in the /main0.php endpoint, exploitable via the ?m= parameter to inject JavaScript and execute code in a victim’s browser, with potential for sensitive data access, session hijacking, or unauthorized actions. Remed...

CVE-2025-63229

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting XSS vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's...

DB Electronica Mozart FM Transmitter 安全漏洞

DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from DB Electronica, Italy. A security vulnerability exists in the DB Electronica Mozart FM Transmitter WEBMOZZI-00287 version, which originates from the presence of reflective cross-site scripting in the...

CVE-2025-63227

The CVE-2025-63227 issue affects Mozart FM Transmitter web management interface WEBMOZZI-00287. Affected component: /patch.php with unrestricted file upload; requires administrative credentials to upload arbitrary files (e.g., PHP webshells) stored under /patch/, enabling execution of arbitrary c...

CVE-2025-63227

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files e.g., PHP webshells, which are stored in the /patch/ directory. This...

CVE-2025-63228

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /uploadfile.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file e.g., a PHP webshell to the server. The uploade...

DB Electronica Mozart FM Transmitter 安全漏洞

DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from DB Electronica, Italy. A security vulnerability exists in the DB Electronica Mozart FM Transmitter version WEBMOZZI-00287, which originates from the presence of an unauthenticated file upload in the...

PT-2025-47411

Name of the Vulnerable Software and Affected Versions Mozart FM Transmitter version WEBMOZZI-00287 Description The Mozart FM Transmitter web management interface is susceptible to a reflected Cross-Site Scripting XSS issue. An attacker can inject a malicious JavaScript payload into the ?m= query...

CVE-2025-63229

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting XSS vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's...

CVE-2025-63227

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files e.g., PHP webshells, which are stored in the /patch/ directory. This...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in the successful path. Setting tty-discdata before opening the NCI device means that we need to clean up the state in error paths. This also creates a short window during which the device ma...

PT-2025-41732

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A weakness exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Manipulation of this component can result i...

EUVD-2017-18580

Malware in sbrugna...

EUVD-2017-18576

Malware in sbrugna...

Adversarial-Resilient RF Fingerprinting: A CNN-GAN Framework for Rogue Transmitter Detection

Radio Frequency Fingerprinting RFF has evolved as an effective solution for authenticating devices by leveraging the unique imperfections in hardware components involved in the signal generation process. In this work, we propose a Convolutional Neural Network CNN based framework for detecting rog...