Lucene search
+L

1356 matches found

OSV
OSV
•added 2026/06/10 2:35 p.m.•23 views

EEF-CVE-2026-49760 Stack Buffer Overflow in ei_s_print_term at Very Large Integer

Summary Stack-based Buffer Overflow vulnerability in Erlang OTP erlinterface allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erlinterface/src/misc/eiprintterm.c and program routine eisprintterm. The C function eisprintterm uses an internal 2000-character...

6.9CVSS6.7AI score0.00136EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/06/10 12:00 a.m.•29 views

On-Chip Quantum Randomness Amplification

Randomness amplification, the task of extracting uniform private bits from biased seeds that may be partly known by a malicious third party, is of central importance in cryptography. The highest security in this task is provided by a class of quantum protocols known as device-independent, which...

5.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/06/09 4:02 p.m.•74 views

CVE-2026-49841 FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...

9.8CVSS0.00605EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/06 6:43 p.m.•26 views

CVE-2026-42790

A flaw was found in Erlang OTP publickey. This improper certificate validation vulnerability allows a subordinate Certificate Authority CA with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name SAN but contains a craft...

8.1CVSS7.1AI score0.00469EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•6 views

PT-2026-86275

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

6.8CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/06/04 12:00 a.m.•11 views

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/06/04 12:00 a.m.•71 views

The vulnerability of the VoIP gateway software Telecom MG, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the VoIP gateway software of Telecom MG is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•6 views

PT-2026-86273

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•6 views

PT-2026-86272

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/27 12:23 p.m.•13 views

CVE-2026-42791

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows forged OCSP responses signed with an expired responder certificate to be accepted as valid. OCSP response verification in pubkeyocsp:verifyresponse/5 and pubkeyocsp:isauthorizedresponder/3 in...

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2026/05/27 12:23 p.m.•84 views

CVE-2026-42791

Summary: CVE-2026-42791 is an improper certificate validation weakness in Erlang OTP’s public_key/pubkey_ocsp module. OCSP response verification (pubkey_ocsp:verify_response/5 and pubkey_ocsp:is_authorized_responder/3) fails to enforce the validity period (notBefore/notAfter) of the OCSP responde...

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•5 views

PT-2026-86271

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•8 views

PT-2026-86270

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•19 views

The vulnerability of theOTP library set up in the Erlang programming language, related to deficiencies in handling http requests, allows attackers to carry out attacks by replacing HTTP requests.

The vulnerability of theOTP library in the Erlang programming language is related to deficiencies in handling http requests. Exploiting this vulnerability allows a malicious actor to carry out attacks by replacing HTTP requests...

9.7CVSS7.5AI score0.0047EPSS
SaveExploits0References15Affected Software4
The Hacker News
The Hacker News
•added 2026/05/21 2:17 p.m.•41 views

Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications provider in the Middle East since at least mid-2022. "Showboat is a modular post-exploitation framework designed for Linux systems, capable...

9.8CVSS7.7AI score0.99996EPSS
SaveExploits65
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•13 views

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

10CVSS6.2AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/18 12:00 a.m.•6 views

PT-2026-46075

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти проверку сеансовой аутентификации и перезаписать конфигурацию шлюза...

10CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/18 12:00 a.m.•6 views

PT-2026-46074

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с правами root...

10CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•13 views

The vulnerability of the VoIP gateway software Telecom MG, related to deficiencies in authentication procedures, allows a perpetrator to bypass session authentication and reconfigure the gateway’s configuration.

The vulnerability of the VoIP gateway software of Telecom MG is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass session authentication checks and reconfigure the gateway settings...

10CVSS5.8AI score
SaveExploits0Affected Software1
HackRead
HackRead
•added 2026/05/13 10:06 a.m.•32 views

Why Canadian Telecom Providers Are Prime Targets for Cyberattacks

Canadian telecom providers face mounting cyber threats from ransomware, SIM swapping, data breaches, and nation-state attacks targeting critical infrastructure...

5.8AI score
SaveExploits0
Rows per page
Query Builder