145 matches found
CVE-2021-47740 KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability
KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms...
PT-2025-54421
KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms...
DB Elettronica Screen SFT DAB 授权问题漏洞
DB Elettronica Screen SFT DAB is a series of digital audio broadcast transmitters from DB Elettronica, Italy. An authorization issue vulnerability exists in DB Elettronica Screen SFT DAB version 1.9.3, which stems from authentication bypass and weak session management, and could lead to...
EUVD-2019-2500
Malware in sbrugna...
EUVD-2017-17369
Malware in sbrugna...
EUVD-2018-7357
Malware in sbrugna...
EUVD-2025-17138
Malicious code in bioql PyPI...
EUVD-2023-48470
Malicious code in bioql PyPI...
EUVD-2025-18210
Malicious code in bioql PyPI...
EUVD-2023-36591
Malicious code in bioql PyPI...
EUVD-2022-48728
Malicious code in bioql PyPI...
EUVD-2021-33397
Malicious code in bioql PyPI...
EUVD-2025-8101
Malicious code in bioql PyPI...
EUVD-2023-48455
Malicious code in bioql PyPI...
EUVD-2025-6437
Malicious code in bioql PyPI...
Hard-Earned Lessons in Access Control at Scale: Enforcing Identity and Policy across Trust Boundaries with Reverse Proxies and MTLS
In today's enterprise environment, traditional access methods such as Virtual Private Networks VPNs and application-specific Single Sign-On SSO often fall short when it comes to securely scaling access for a distributed and dynamic workforce. This paper presents our experience implementing a...
CVE-2025-37103
Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system...
Physical Layer-Based Device Fingerprinting for Wireless Security: from Theory to Practice
The identification of the devices from which a message is received is part of security mechanisms to ensure authentication in wireless communications. Conventional authentication approaches are cryptography-based, which, however, are usually computationally expensive and not adequate in the...
CVE-2025-41362
CVE-2025-41362 affects IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The issue is a code injection vulnerability that could allow an attacker to store a malicious payload that runs in the victim’s browser. Exploitation requires authentication to the device and execution of certain commands with vi...