EUVD-2025-14852

Malicious code in bioql PyPI...

EUVD-2025-29681

Malicious code in bioql PyPI...

EUVD-2023-37246

Malicious code in bioql PyPI...

CVE-2025-55075

Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker...

CVE-2025-58116

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...

CVE-2025-58116

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...

CVE-2025-58116

Summary : CVE-2025-58116 affects I-O DATA WN-7D36QR and WN-7D36QR/UE routers. The issue is an OS command injection caused by improper neutralization of special elements in commands. Impact : remote authenticated attacker could execute arbitrary OS commands. Affected software : WN-7D36QR family (w...

CVE-2025-55075

Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker...

PT-2025-38106

Name of the Vulnerable Software and Affected Versions: WN-7D36QR WN-7D36QR/UE Description: A hidden functionality issue exists that may allow a remote authenticated attacker to enable SSH access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-52288

Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...

CVE-2025-52288

Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...

CVE-2025-52288

Summary (CVE-2025-52288): Open5GS up to version 2.7.5 has an assertion failure in the AMF ngap-build function (ngap_build_downlink_nas_transport) that can cause a denial of service via repeated UE connect/disconnect sequences. The issue is exploitable through the AMF component and is tracked with...

Malicious code in ue-youxi-kaifa-xiangmu (npm)

The package ue-youxi-kaifa-xiangmu was found to contain malicious code...

Malicious code in @zalastax/nolb-react-ue (npm)

The package @zalastax/nolb-react-ue was found to contain malicious code...

MAL-2025-37504 Malicious code in ue-youxi-kaifa-xiangmu (npm)

The package ue-youxi-kaifa-xiangmu was found to contain malicious code...

Malicious code in epic-ue-saleforce-form (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5403 Malicious code in epic-ue-saleforce-form (npm)

The package communicates with a domain associated with malicious activity...

CVE-2023-33057

Transient DOS in Multi-Mode Call Processor while processing UE policy container...

CVE-2023-37018

Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Capability Info Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37030

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected eNBUES1APID field...