IMSI-catcher

IMSI-catcher This program shows you IMSI numbers, country, brand and operator of cellphones around you. /!\ This program was made to understand how GSM network work. Not for bad hacking ! What you need 1 PC with Gnu/Linux. Tested with : debian 10 Ubuntu 20.04/LinuxMint 22.2+ Kali 2025+ 1 SDR...

libbtbb

libbtbb This is the Bluetooth baseband decoding library, forked from the GR-Bluetooth project. It can be used to extract Bluetooth packet and piconet information from Ubertooth devices as well as GR-Bluetooth/USRP. This code is incomplete, it is still under active development. Patches and bug...

gr-PHYSEC

gr-PHYSEC: GNU Radio Module for Physical Layer Security This GNU Radio module provides channel fingerprinting capabilities for physical layer security applications using deep learning models. Features Channel Fingerprinting : Extract unique channel characteristics from IQ samples Deep Learning...

gr-qradiolink

gr-qradiolink IMPORTANT NOTICE : This is AI-generated code. This code has not been reviewed by professional coders, it is a large task. There are tests available in the codebase, please review those and their code. GNU Radio out-of-tree OOT module for QRadioLink blocks. Branchmain: GNU Radio 3.10...

CVE-H3C-Report

H3C GR series router system management has unauthorized access vulnerability Product : GR series router version : all rating : high-risk website : http://www.h3c.com/ Hazards : Attackers can exploit this vulnerability to obtain sensitive information from routers by constructing special request...

PT-2026-123186

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load gr item. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

Malicious code in gr-nutr-sdaf (npm)

Source: amazon-inspector 5dbc195bc1405e4bac620decabb079bd1dbba43bce25f06d0c8ebc48094ebd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apasih-merahdd-gr (npm)

Source: amazon-inspector 0b399c5d8f711e1da0ad1e9b3a3f271be274ea13911d7000e9e35bae897308d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gr-mg (PyPI)

Source: kam193 9299ffcce3856f06a694bb95009da56415f80f19ed8b67f444edbf4f3556ec77 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the username to the package author. There is no other purpose...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014329 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: grudc: fix memory leak with using debugfslookup When calling debugfslookup the resul...

MINI-VCH6-P5X8-GR6X

Bulletin has no description...

CVE-2026-28416

A flaw was found in Gradio, an open-source Python package for rapid prototyping. A remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by hosting a malicious Gradio Space. When a victim application uses gr.load to load this attacker-controlled Space, a malicious proxyurl...

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Summary A Server-Side Request Forgery SSRF vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses gr.load to load an attacker-controlled Space, the malicious proxyurl from the config is...

CVE-2026-28416 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery SSRF vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses...

CVE-2022-37067

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti...

CVE-2022-37072

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti...

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

CVE-2022-37073

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti...

CVE-2019-25259

CVE-2019-25259 affects Leica Geosystems GR10/GR25/GR30/GR50 GNSS software (version 4.30.063). The vulnerability is a cross-site request forgery that allows attackers to trigger administrative actions without proper request validation by tricking authenticated users into submitting malicious reque...

PT-2026-1672

Name of the Vulnerable Software and Affected Versions Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063 Description The software contains a cross-site request forgery issue that could allow attackers to perform administrative actions without proper validation of requests. Attackers can...