EUVD-2021-8914

Malicious code in bioql PyPI...

EUVD-2022-41617

Malicious code in bioql PyPI...

EUVD-2023-29581

Malicious code in bioql PyPI...

EUVD-2023-29586

Malicious code in bioql PyPI...

EUVD-2021-8904

Malicious code in bioql PyPI...

EUVD-2023-29583

Malicious code in bioql PyPI...

EUVD-2023-29590

Malicious code in bioql PyPI...

EUVD-2022-41620

Malicious code in bioql PyPI...

EUVD-2022-41618

Malicious code in bioql PyPI...

EUVD-2023-29588

Malicious code in bioql PyPI...

CVE-2021-21742

There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use this vulnerability to obtain some sensitive information of users by accessing specific pages...

CVE-2023-25644 Denial of Service Vulnerability in Some ZTE Mobile Internet Products

There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack...

CVE-2023-25644: Improper Handling of Exceptional Conditions

There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack...

CVE-2023-25643: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands...

CVE-2023-25651: Improper Input Validation

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak...

PT-2023-20203 · Zte · Zte Mobile Internet

Name of the Vulnerable Software and Affected Versions: ZTE mobile internet products affected versions not specified Description: The issue is related to a buffer overflow vulnerability due to insufficient validation of the tcp port parameter. This could allow an authenticated attacker to perform ...

CVE-2023-25642: Buffer Copy without Checking Size of Input

There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack...

CVE-2023-25649: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...

CVE-2023-25647: Improper Privilege Management

There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event...

PT-2023-20207 · Zte · Zte Mobile Phones

Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: There is a permission and access control issue in some ZTE mobile phones, allowing applications to monitor touch events due to improper access control. Recommendations: At the...