309 matches found
EUVD-2025-14852
Malicious code in bioql PyPI...
CVE-2025-21484: Buffer Over-read
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...
CVE-2025-21487: Buffer Over-read
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...
CVE-2025-55075
Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker...
CVE-2025-58116
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...
CVE-2025-58116
Summary : CVE-2025-58116 affects I-O DATA WN-7D36QR and WN-7D36QR/UE routers. The issue is an OS command injection caused by improper neutralization of special elements in commands. Impact : remote authenticated attacker could execute arbitrary OS commands. Affected software : WN-7D36QR family (w...
CVE-2025-58116
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...
CVE-2025-55075
Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker...
CVE-2025-58116: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...
PT-2025-38106
Name of the Vulnerable Software and Affected Versions: WN-7D36QR WN-7D36QR/UE Description: A hidden functionality issue exists that may allow a remote authenticated attacker to enable SSH access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-52288
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
CVE-2025-52288
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
CVE-2025-52288: Uncontrolled Resource Consumption
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
CVE-2025-52288
The Open5GS 5G Core and EPC implementation is vulnerable to a denial of service due to an assertion failure in the ngap_build_downlink_nas_transport function within the Access and Mobility Management Function (AMF) component (specifically in src/amf/ngap-build.c). This issue affects versions thro...
Malicious code in @zalastax/nolb-react-ue (npm)
The package @zalastax/nolb-react-ue was found to contain malicious code...
Malicious code in ue-youxi-kaifa-xiangmu (npm)
The package ue-youxi-kaifa-xiangmu was found to contain malicious code...
MAL-2025-37504 Malicious code in ue-youxi-kaifa-xiangmu (npm)
The package ue-youxi-kaifa-xiangmu was found to contain malicious code...
Malicious code in epic-ue-saleforce-form (npm)
The package communicates with a domain associated with malicious activity...
