70 matches found
CVE-2026-19771
A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...
CVE-2026-19771 Baicells EG3661M LuCI Web luci os command injection
A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...
EUVD-2026-58564
A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...
CVE-2026-19771
A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...
CVE-2026-19771
CVE-2026-19771 affects Baicells EG3661M with LuCI Web Interface (file /cgi-bin/luci). The vulnerability arises from manipulating the arguments MaxHops/Timeout/Size, enabling OS command injection. AttackVector is NETWORK with LOW complexity and none user interaction required; authenticated context...
PT-2026-71949
Name of the Vulnerable Software and Affected Versions Baicells EG3661M version BaiCE BQ6 2.0.5.3 NA Description An OS command injection flaw exists in the LuCI Web Interface component. A remote attacker can exploit this by manipulating the MaxHops, Timeout, or Size arguments within the...
EUVD-2023-28086
Malicious code in bioql PyPI...
EUVD-2023-12793
Malicious code in bioql PyPI...
EUVD-2022-29560
Malicious code in bioql PyPI...
EUVD-2023-23384
Malicious code in bioql PyPI...
EUVD-2023-58446
Malicious code in bioql PyPI...
EUVD-2023-28526
Malicious code in bioql PyPI...
Baicells SPECTRA LTE-U eNB 信任管理问题漏洞
The Baicells SPECTRA LTE-U eNB is an outdoor LTE-U base station from Baicells. A trust management issue vulnerability exists in the Baicells SPECTRA LTE-U eNB that stems from the use of hard-coded credentials that could lead to security feature bypass...
Baicells多款产品 信息泄露漏洞
Baicells Nova 436Q and others are products of Baicells, Inc.Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB. Baicells Nova 243 and others are products of the company.Baicells Nova 243 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. An information...
Baicells NEUTRINO430 安全漏洞
Baicells NEUTRINO430 is an LTE base station from Baicells. A security vulnerability exists in the Baicells NEUTRINO430 that stems from the use of a default encryption key could lead to a security feature bypass...
Baicells EG7035E-M11 跨站脚本漏洞
The Baicells EG7035E-M11 is an LTE base station from Baicells. A cross-site scripting vulnerability exists in the Baicells EG7035E-M11 BaiCEBM2.5.26NA version, which stems from improper input neutralization could lead to a cross-site scripting attack...
Baicells多款产品 操作系统命令注入漏洞
Baicells Nova 436Q and others are products of Baicells Inc.Baicells Nova 436Q is an advanced dual carrier outdoor eNodeB eNB. Baicells Nova 243 and others are products of the company.Baicells Nova 243 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. An operating system...
Baicells多款产品 安全漏洞
Baicells Nova 436Q and others are products of Baicells, Inc.Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB. Baicells Nova 227 and others are products of the company.Baicells Nova 227 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. A security vulnerabili...
CVE-2023-1097
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...