Awesome-Cellular-Hacking

Awesome Cellular Hacking 2G/3G/4G/5G 셀룰러 보안 연구 및 분석을 위한 포괄적인 선별 리소스 목록 이 저장소는 셀룰러 보안 분야의 커뮤니티 지식을 통합하며, 익스플로잇, 연구 논문, 도구 및 교육 리소스를 포함합니다. 목표는 찾기 어려워질 수 있는 중요한 보안 연구를 보존하고 정리하는 것입니다. 면책 조항: 이 정보는 교육 및 방어적 보안 연구 목적으로만 제공됩니다. 관련 법률 및 규정을 준수하여 책임감 있게 사용하십시오. 목차 시작하기 로기지 기지국 최근 업데이트 2024-2025 소프트웨어 및 ...

The vulnerability of the TextEditingConversion() function in the microprogramming software for Tenda AC15 allows a hacker to execute arbitrary code.

The vulnerability of the TextEditingConversion function in the Tenda AC15 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the wpapskcrypto24g parameter. Exploiting this vulnerability allows a remote attacker to execute...

EUVD-2014-5729

Malware in sbrugna...

EUVD-2021-19331

Malware in sbrugna...

EUVD-2021-19330

Malware in sbrugna...

EUVD-2021-19333

Malware in sbrugna...

EUVD-2021-19332

Malware in sbrugna...

EUVD-2024-45066

Malicious code in bioql PyPI...

EUVD-2024-45065

Malicious code in bioql PyPI...

EUVD-2024-45072

Malicious code in bioql PyPI...

EUVD-2024-45067

Malicious code in bioql PyPI...

EUVD-2022-25343

Malicious code in bioql PyPI...

Tenda AC500 Stack Buffer Overflow Vulnerability

Tenda AC500 is a wireless controller device from Tenda, designed for small and medium-sized businesses, supporting cross-VLAN management of wireless networks. Tenda AC500 has a stack buffer overflow vulnerability, which originates from the parameter radio2g1 in the file /goform/setWtpData fails t...

CVE-2022-21744

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data PNCD improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20083

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID:...

CVE-2021-32487

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456...

CVE-2021-32484

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917...

CVE-2024-50367

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The source of the vulnerability relies on...

CVE-2024-50372

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

The vulnerability of the “edgserver” service in the microprogramming software for multifunctional wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the “edgserver” service in the microprogramming-based wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO models exists due to the failure to take measures to neutralize the special elements used in the operating system commands. Exploiting...