CVE-2025-54966

CVE-2025-54966 affects BAE Systems SOCET GXP prior to 4.6.0.2. The SOCET GXP Job Status Service endpoints may disclose sensitive information in certain situations, including local file paths and SOCET GXP version information. This is documented across NVD, Red Hat, EUVD/ENISA, and other feeds. No...

CVE-2025-54964

CVE-2025-54964 affects BAE Systems SOCET GXP prior to 4.6.0.2. The issue arises when a user can interact with the GXP Job Service, enabling injection of arbitrary executables. If the Job Service is configured for local-only access, this may allow privilege escalation; if it is network-accessible,...

EUVD-2006-5216

Malware in sbrugna...

EUVD-2025-26679

Malicious code in bioql PyPI...

EUVD-2025-26691

Malicious code in bioql PyPI...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36905

In gxpmappingcreate of gxpmapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36905

In gxpmappingcreate of gxpmapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36905

In gxpmappingcreate of gxpmapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

CVE-2025-36893 describes a local information-disclosure vulnerability due to uninitialized data in ReadTachyonCommands within gxp_main_actor.cc. The issue can leak information with no additional execution privileges and no user interaction required. Affected component: the gxp main actor’s ReadTa...

PT-2025-35876

Name of the Vulnerable Software and Affected Versions: gxp versions affected versions not specified Description: An information leak may occur due to uninitialized data in the ReadTachyonCommands function within gxp main actor.cc. This could lead to local information disclosure without requiring...

PUB-A-413471185

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Grandstream GXP IP Phone Detection Consolidation

Consolidation of Grandstream GXP IP phone detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Grandstream GXP IP Phone Detection (Telnet)

Telnet based detection of Grandstream GXP IP phones. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Grandstream GXP IP Phone Detection (HTTP)

HTTP based detection of Grandstream GXP IP phones. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2006-5231

CVE-2006-5231 affects the Grandstream GXP-2000 VoIP Desktop Phone (firmware 1.1.0.5). The vulnerability allows remote attackers to cause a denial of service (hang or reboot) by sending a large amount of ASCII data to UDP ports 5060, 5062, 5064, 5066, 9876, or 26789. The impact is described as ava...

CVE-2006-5231

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...