436 matches found
Awesome-Cellular-Hacking
蜂窝网络入侵资源大全 面向 2G/3G/4G/5G 蜂窝安全研究与分析的精心策划的全面资源列表 本仓库整合了蜂窝安全领域的社区知识，包括漏洞利用、研究论文、工具和教育资源。目标是保存并整理那些原本可能难以找到的重要安全研究。 免责声明： 本信息仅供教育和防御性安全研究目的使用。请负责任地使用，并遵守适用的法律法规。 目录 入门 恶意基站 近期更新（2024-2025） 软件与工具 硬件配置 测试与研究方法 攻击向量 会议演讲 研究论文 设备与硬件 检测与防御 蜂窝物联网与 NB-IoT 安全 卫星与蜂窝融合 私有 5G 网络安全 网络切片与边缘安全 汽车与工业蜂窝网络 取证与调查 漏洞披...
DRA_writeup
Oracle DSR의 보안 취약점 KPN CISO REDteam KPN은 네덜란드에 위치한 통신 사업자입니다. CISO REDteam은 2013년에 도입된 KPN의 윤리적 해킹 팀입니다. 이 팀은 KPN 애플리케이션 및 서비스의 보안 테스트에 참여하여 고객 데이터가 무단 액세스, 수정 및 데이터 손실로부터 안전하게 보호되도록 합니다. Diameter Routing Agent 배경 KPN은 네덜란드에서 가장 큰 모바일 네트워크를 운영합니다. KPN이 운영하는 4G 네트워크의 구성 요소 중 하나는 Oracle Diameter...
CP-XR-DE21-S--4G-Router-Vulnerabilities
CP-XR-DE21-S--4G-Router-Vulnerabilities This report is for CVE-2025-44039 reserved for Router UART vulnerability assigned to Discoverer Yashodhan Vivek Mandke. Please download the report pdf in this repositoy...
CVE-2026-52200
UZ801 / ES-U3TS MifiService 취약한 접근 제어 OEM / 화이트 라벨 UZ801v2.1 4G LTE 모바일 Wi-Fi 플랫폼시장에서는 ES-U3TS로도 판매 확인됨의 MifiService.apk가 노출하는 임베디드 웹 관리 API의 취약한 접근 제어 문제에 대한 보안 권고 및 기술 노트입니다. 이 저장소는 조율된 공개coordinated disclosure 및 CVE 할당을 지원하기 위한 것입니다. 재현 가능하고 비무기화된 기술 증거에 중점을 둡니다. 요약 영향을 받는 장치는 다음 주소에서 Jetty 기반...
CVE-2026-7192
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...
CVE-2026-7193
A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...
EUVD-2026-88758
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...
CVE-2026-7192
The Dbit T-CPE301K 4G Mini WiFi Router is susceptible to a stack-based buffer overflow vulnerability. An authenticated attacker can trigger a denial of service (DoS) and a system reboot by sending a manipulated HTTP POST request to the /js/common/do_cmd.js endpoint. The vulnerability is caused by...
CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...
CVE-2026-7193
The T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment is vulnerable to unauthorized access due to the use of predefined static credentials . An attacker connected to the same network can exploit the Telnet service (port 23) to gain full root access to the device. No specific reme...
CVE-2026-7192: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...
CVE-2026-63587
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
EUVD-2026-65329
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-63587
IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...
PT-2026-81227
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-63587: Authentication Bypass Using an Alternate Path or Channel
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...
CVE-2026-12495 Stack-Based Buffer Overflow in the Mercusys MB115-4G
Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...
CVE-2026-12495
Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...