Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Mirantis reveals Lens Prism, an AI copilot for operating Kubernetes clusters

      July 3, 2025

      Avoid these common platform engineering mistakes

      July 3, 2025

      Full-Stack Techies vs Toptal: Which Is Better for React.js Outsourcing?

      July 3, 2025

      The AI productivity paradox in software engineering: Balancing efficiency and human skill retention

      July 2, 2025

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025

      Microsoft reportedly lacks the know-how to fully leverage OpenAI’s tech — despite holding IP rights

      July 3, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025
      Recent

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025

      Recording cross browser compatible media

      July 3, 2025

      Celebrating Perficient’s Third Databricks Champion

      July 3, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025
      Recent

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-24330 – “Nokia Single RAN Baseband SOAP Path Traversal Vulnerability”

    CVE-2025-24330 – “Nokia Single RAN Baseband SOAP Path Traversal Vulnerability”

    July 2, 2025

    CVE ID : CVE-2025-24330

    Published : July 2, 2025, 9:15 a.m. | 27 minutes ago

    Description : Sending a crafted SOAP “provision” operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traversal issue in Nokia Single RAN baseband software with versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

    Beginning with release 24R1-SR 1.0 MP, the OAM service software performed PlanId field input validations mitigate the reported path traversal issue.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-24331 – Nokia Single RAN Root Privilege Escalation Vulnerability
    Next Article CVE-2025-24329 – “Nokia Single RAN Baseband SOAP Path Traversal Vulnerability”

    Related Posts

    Development

    Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

    July 3, 2025
    Development

    Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC

    July 3, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-4286 – “Intelbras InControl Credential Storage Vulnerability”

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2024-56193 – “Bluetooth Adapter Permissions Bypass Vulnerability in [Vendor Name]”

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-2571 – Mattermost Google OAuth Credential Disclosure

    Common Vulnerabilities and Exposures (CVEs)

    Cyber Brief 25-05 – April 2025

    Security

    Highlights

    CVE-2025-43845 – VITS Voice Changing Framework Remote Code Injection Vulnerability

    May 5, 2025

    CVE ID : CVE-2025-43845

    Published : May 5, 2025, 6:15 p.m. | 36 minutes ago

    Description : Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to code injection. The ckpt_path2 variable takes user input (e.g. a path to a model) and passes it to change_info_ function, which opens and reads the file on the given path (except it changes the final on the path to train.log), and passes the contents of the file to eval, which can lead to remote code execution. As of time of publication, no known patches exist.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Google Classroom Has Some New Tools to Help Teachers Track Student Progress

    June 12, 2025

    INRFlow: Flow Matching for INRs in Ambient Space

    June 19, 2025

    CVE-2025-5364 – Campcodes Online Hospital Management System SQL Injection

    May 30, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.