CVE-2025-46273 – UNI-NMS-Lite Hard-Coded Credentials Authentication Bypass

April 24, 2025

CVE ID : CVE-2025-46273

Published : April 24, 2025, 11:15 p.m. | 4 hours, 14 minutes ago

Description : UNI-NMS-Lite uses hard-coded credentials that could allow an
unauthenticated attacker to gain administrative privileges to all
UNI-NMS managed devices.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46272 – D-Link Router Command Injection Vulnerability

Next Article CVE-2025-46275 – Fortinet FortiSwitch Unauthenticated Administrator Account Creation

Highlights

CVE-2025-5644 – Radare2 Use After Free Vulnerability in r_cons_flush Function

June 5, 2025

CVE ID : CVE-2025-5644

Published : June 5, 2025, 7:15 a.m. | 4 hours, 25 minutes ago

Description : A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and “crashy”. Further analysis has shown “the race is not a real problem unless you use asan”. A new warning has been added.

Severity: 2.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-46273 – UNI-NMS-Lite Hard-Coded Credentials Authentication Bypass

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

KDE Plasma: addio alla versione LTS, più supporto per tutte le versioni e nuova telemetria trasparente

Orbital Mechanics (or How I Optimized a CSS Keyframes Animation)

I grew up on a farm. These are the tools I recommend for gardening

No-code data preparation for time series forecasting using Amazon SageMaker Canvas

CVE-2025-5644 – Radare2 Use After Free Vulnerability in r_cons_flush Function

Meta’s AI Chatbots Exposed: Caught Sexting Minors Using Celebrity Voices

7 details you might have missed in that Black Ops 7 teaser

Philippines Prepares for 2025 Elections with Focus on Digital Integrity and Misinformation

CVE-2025-46273 – UNI-NMS-Lite Hard-Coded Credentials Authentication Bypass

Related Posts