766 matches found
Rogue Cell: Adversarial Attack and Defense in Untrusted O-RAN Setup Exploiting the Traffic Steering XApp
The Open Radio Access Network O-RAN architecture is revolutionizing cellular networks with its open, multi-vendor design and AI-driven management, aiming to enhance flexibility and reduce costs. Although it has many advantages, O-RAN is not threat-free. While previous studies have mainly examined...
Unmasking the new XorDDoS controller and infrastructure
Cisco Talos observed an existing distributed denial-of-service DDoS malware known as XorDDoS, continuing to spread globally between November 2023 and February 2025. A significant finding shows that over 70 percent of attacks using XorDDoS targeted the United States from Nov. 2023 to Feb. 2025. Th...
KubeFence: Security Hardening of the Kubernetes Attack Surface
Kubernetes K8s is widely used to orchestrate containerized applications, including critical services in domains such as finance, healthcare, and government. However, its extensive and feature-rich API interface exposes a broad attack surface, making K8s vulnerable to exploits of software...
airflow-operators (>=0.1.0 <=0.11.1), apache-airflow-providers-fastetl (>=0.0.36 <=0.0.39) potentially affected by CVE-2025-27018 via apache-airflow-providers-mysql (>=5.7.3 <=5.7.4)
apache-airflow-providers-mysql PYPI version =5.7.3, =0.1.0, =0.0.36, =0.0.39 Source cves: CVE-2025-27018 Source advisory: OSV:GHSA-HHM6-JJF4-6PM3...
CVE-2025-22870 vulnerabilities
Vulnerabilities for packages: syft-fips, crossplane-provider-aws-memorydb, crossplane-provider-aws-sqs, fulcio, kube-logging-logging-operator, neuvector, trivy-fips, crossplane-provider-aws-eks, cert-exporter-fips, amazon-ssm-agent, cilium-envoy-fips, terraform, crossplane-provider-sql,...
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable to be used for its intended purpose...
CVE-2024-42407
Insertion of Sensitive Information into Log File CWE-532 in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to...
Magma Stack Overflow Vulnerability
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a stack overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted NAS packet...
Magma null pointer dereference vulnerability (CNVD-2025-15068)
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...
Magma has an unspecified vulnerability
is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. A security vulnerability exists in Magma version 1.8.0, which can be exploited by an attacker to compromise an MME using an unauthenticated cell...
Magma Buffer Overflow Vulnerability
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...
Magma null pointer dereference vulnerability (CNVD-2025-15065)
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...
Magma buffer overflow vulnerability (CNVD-2025-02449)
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...
Magma null pointer dereference vulnerability (CNVD-2025-02445)
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...
Chinese Innovations Spawn Wave of Toll Phishing Via SMS
Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass , warning that recipients face fines if a delinquent toll fee remains unpaid. Researchers say the surge in SMS spam coincides with new features added to a popular...
CVE-2024-36402 Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo
Matrix Media Repo MMR is a highly configurable multi-homeserver media repository for Matrix. MMR before version 1.3.5 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then...
GHSA-PQ9P-PC3P-9HM4 python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
SQL Injection
Overview python-sql is a Library to write SQL queries Affected versions of this package are vulnerable to SQL Injection due to improper escape of non-Expression for unary operators. Remediation Upgrade python-sql to version 1.5.2 or higher. References - Commit - Issue - Security Release Credit:...
