362 matches found
Awesome-Cellular-Hacking
Awesome Cellular Hacking Una lista curata e completa di risorse per la ricerca e l'analisi della sicurezza cellulare 2G/3G/4G/5G Questo repository consolida la conoscenza della community nel campo della sicurezza cellulare, inclusi exploit, paper di ricerca, strumenti e risorse didattiche...
EUVD-2026-65329
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-63587
IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...
DRA_writeup
Vulnerabilità di sicurezza in Oracle DSR KPN CISO REDteam KPN è un operatore di telecomunicazioni con sede nei Paesi Bassi. Il CISO REDteam è stato introdotto nel 2013 ed è il team di ethical hacking di KPN. Questo team è coinvolto nei test di sicurezza delle applicazioni e dei servizi KPN per...
CP-XR-DE21-S--4G-Router-Vulnerabilities
CP-XR-DE21-S--4G-Router-Vulnerabilities Questo report riguarda il CVE-2025-44039, riservato alla vulnerabilità UART del router, assegnata allo scopritore Yashodhan Vivek Mandke. Scarica il PDF del report in questo repository...
CVE-2026-12495 Stack-Based Buffer Overflow in the Mercusys MB115-4G
Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...
EUVD-2026-49144
Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...
CVE-2026-12495
CVE-2026-12495: A stack-based buffer overflow in the Mercusys MB115-4G web interface (http_gdpr_decrypt) can be triggered by a crafted request to /cgi/login, leading to memory corruption and a crash of the httpd process, resulting in DoS of the web administration service. Affected component: Merc...
PT-2026-64875
Name of the Vulnerable Software and Affected Versions Mercusys MB115-4G affected versions not specified Description A denial-of-service DoS issue exists in the web interface due to a stack buffer overflow—a condition where a program writes more data to a buffer located on the stack than it can...
CVE-2026-3400
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...
EUVD-2026-9133
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...
CVE-2026-3400 Tenda AC15 TextEditingConversion stack-based overflow
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...
CVE-2022-26446
In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...
CVE-2025-12619
A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapskcrypto24g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could b...
EUVD-2018-6249
Malware in sbrugna...
EUVD-2013-3515
Malware in sbrugna...
EUVD-2019-16980
Malware in sbrugna...
EUVD-2019-14912
Malware in sbrugna...