SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A trust management issue vulnerability exists in SunGrow WiNet-S version V200.001.00.P027 and prior versions, which stems from the use of hard-coded MQTT credentials. An attacker could use this vulnerability to send arbitrary...

CLSA-2025-1737654382 tomcat: Fix of CVE-2024-38286

CVE-2024-38286: fix DoS vulnerability in TLS handshake process...

CVE-2024-52329

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens...

go-git: argument injection via the URL field

An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...

Oracle Database Server (January 2025 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory. - Uncontrolled search path element in the IntelR oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially...

CVE-2023-37023

Open5GS MME versions = 2.6.4 contain a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MMEUES1APID field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service...

Debian dla-3708 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3708 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3708-1 [email protected] https://www.debian.org/lts/security/...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.6.4 and prior versions, which stems from the inclusion of reachable assertions in the Uplink NAS Transport...

PT-2025-1415 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions prior to 2.6.4 Description: The issue is related to a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MME UE S1AP ID field causes Open5GS to crash. An attacker may repeatedly send such...

PT-2025-1430 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Uplink NAS Transport" packet missing an expected MME UE S1AP ID...

Ruijie Networks RG-EW300N 安全漏洞

Ruijie Networks RG-EW300N is an intelligent wireless router from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks RG-EW300N version 1.300.1422, which originates from a remote code execution vulnerability via modified MQTT proxy messages...

go-git: argument injection via the URL field

An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...

The vulnerability of the Reliable Multicast Transport Driver (RMCAST) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ivanti Connect Secure IFT TLS Stack Overflow / Remote Code Execution

This is an Ivanti Connect Secure IFT TLS stack overflow pre-authentication remote code execution proof of concept exploit. It is crippled by default...

IBM Concert Encryption Problem Vulnerability (CNVD-2025-02546)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. IBM Concert suffers from an encryption issue vulnerability that stems from a failure to properly enable HTTP Strict Transport Security, which could be...

The vulnerability of the `asyncio._SelectorSocketTransport.writelines()` method in the Python programming language, which allows a hacker to cause a denial-of-service attack

The vulnerability of the asyncio.SelectorSocketTransport.writelines method in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the software implementations of TLS and SSL protocols for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing (PUB) allows a perpetrator to cause service failures.

The vulnerability of software implementations of TLS and SSL protocols for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB involves deficiencies in access control. Exploiting this vulnerability could allow ...

CVE-2025-21307

Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in the Microsoft Windows Reliable Multicast Transport Driver RMCAST. An attacker exploiting this vulnerability could remotely execute code. Th...

Argument Injection

github.com/go-git/go-git is vulnerable to an Argument Injection. The vulnerability is due to improper validation of input arguments passed to the git-upload-pack flags, which allows arbitrary values to be injected when using the file transport protocol...