81 matches found
EUVD-2024-32315
Malicious code in bioql PyPI...
EUVD-2024-37925
Malicious code in bioql PyPI...
CVE-2025-51040
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2...
CVE-2025-28236
Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...
Nautel VX Series 安全漏洞
Nautel VX Series is a series of series of compact solid-state FM transmitters from Nautel. A security vulnerability exists in Nautel VX Series transmitters VXSW6.4.0 and prior versions, which stems from a remote code execution vulnerability during firmware updates that could lead to the execution...
CVE-2025-22962
A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...
CVE-2025-22960
A session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters. Unauthenticated attackers can access exposed log files /logs/debug/xteLog, potentially revealing sensitive session-related information such as session IDs sessid and...
CVE-2024-3741
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...
CVE-2024-3742
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...
CVE-2024-39373
TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges...
CVE-2024-39375
TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...
CVE-2024-39376
TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions...
CVE-2024-39375
TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...
CVE-2024-39374
TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials...
CVE-2024-39376
CVE-2024-39376 affects TELSAT marKoni FM Transmitters (Markoni-D Compact and Markoni-DH Exciter+Amplifiers). The issue is described as Improper Access Control (CWE-284) that allows an attacker to gain unauthorized access to sensitive information or perform actions beyond designated permissions. C...
CVE-2024-39375 Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...
CVE-2024-39375
CVE-2024-39375 affects TELSAT marKoni FM Transmitters (Markoni-D Compact and Markoni-DH Exciter+Amplifiers) versions prior to 2.0.1. Root cause: client-side authentication bypass that could allow an attacker to gain administrator privileges. Impact: remote attacker with no credentials could achie...
CVE-2024-39374
CVE-2024-39374 affects TELSAT marKoni FM Transmitters (Markoni-D/Compact and Markoni-DH/Exciter+Amplifiers; affected versions prior to 2.0.1). Root cause: a hidden admin account accessible via hard-coded credentials, enabling an attacker to gain administrative access without authentication. Publi...
CVE-2024-39373 Improper Neutralization of Special Elements used in a Command in TELSAT marKoni FM Transmitter
TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges...
CVE-2024-39373
The CVE-2024-39373 affects TELSAT marKoni FM Transmitters (Markoni-D Compact and Markoni-DH Exciter+Amplifiers) with all versions prior to 2.0.1. It is an Improper Neutralization of Special Elements used in a Command in the device settings, i.e., a command injection (CWE-77) that could allow an a...