CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905

The CVE-2025-4905 issue affects iop-apl-uw basestation3 up to version 3.0.4, specifically the load_qc_pickl function in basestation3/QC.py. The vulnerability stems from deserialization triggered by manipulating the qc_file argument, requiring local access. Public exploit details exist, and the pr...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

PT-2025-21874 · Unknown · Iop-Apl-Uw Basestation3

Name of the Vulnerable Software and Affected Versions: iop-apl-uw basestation3 versions 3.0.4 and earlier Description: A problem was found in the load qc pickl function of the file basestation3/QC.py, which is affected by deserialization due to the manipulation of the qc file argument. This issue...

MAL-2024-1568 Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

apl.cineca.org Cross Site Scripting vulnerability OBB-3491052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apl-hercynia.de Cross Site Scripting vulnerability OBB-3258516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Debian: Security Advisory (DLA-396-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K53445000: BIND vulnerability CVE-2015-8704

Security Advisory Description apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service INSIST assertion failure and daemon exit via a malformed Address Prefix List APL record. CVE-2015-8704 Impact The BIND named...

Malicious Package

Overview apl-client123 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview apl-client12345 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

MAL-2022-1050 Malicious code in apl-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae90a369ef8b401fdbeffc44d82f8e3ae5e66e88f54717671216a40c0ed1edfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apl-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae90a369ef8b401fdbeffc44d82f8e3ae5e66e88f54717671216a40c0ed1edfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1051 Malicious code in apl-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdbd6ac19695326b2c0ea0fb5ae85e1b5d9a4927fa7561ade4632c52dffe72bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apl-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdbd6ac19695326b2c0ea0fb5ae85e1b5d9a4927fa7561ade4632c52dffe72bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2016:0174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2021-1396)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS...

Command injection

Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; semicolon to the ping command feature...

Directory traversal

Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...