94 matches found
DRA_writeup
Oracle DSR 中的安全漏洞 KPN CISO REDteam KPN 是位于荷兰的一家电信运营商。CISO REDteam 成立于 2013 年，是 KPN 的伦理黑客团队。该团队负责对 KPN 的应用程序和服务进行安全测试，以确保我们客户的数据免遭未经授权的访问、修改和数据丢失。 直径路由代理背景 KPN 运营着荷兰最大的移动网络。KPN 运营的 4G 网络组件之一是基于 Oracle 直径信令路由器 DSR 应用程序的直径路由代理。直径路由代理 DRA 是 3G 或 4G 网络中的一个功能元素，提供实时路由能力，以确保消息在网络中的正确元素之间路由。3GPP 引入了...
CVE-2026-52200
UZ801 / ES-U3TS MifiService 访问控制失效漏洞 本仓库用于公开披露 OEM / 白牌 UZ801v2.1 4G LTE 随身 Wi-Fi 平台中 MifiService.apk 管理接口的访问控制缺陷，并为 CVE 申请提供可公开引用的材料。 当前样机还观察到以 ES-U3TS 形式售卖的同源产品，因此本文使用 UZ801 / ES-U3TS 作为公开命名。 摘要 受影响设备在本地管理地址上暴露了 Jetty Web API： http://192.168.100.1/ajax 后端请求分发核心位于：...
CVE-2026-52199: Improper Neutralization of Special Elements used in a Command
An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...
CVE-2026-52200: Improper Control of Generation of Code
An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...
CVE-2021-47740: Insufficient Session Expiration
KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms...
CVE-2025-68706: Stack-based Buffer Overflow
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attack...
CVE-2025-41108: Improper Authentication
The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating the control station tablet and gaining unauthorised full control of the robot. The absence of encryption and authenticati...
PT-2025-43059
Name of the Vulnerable Software and Affected Versions Ghost Robotics Vision 60 version 0.27.2 Description The communication protocol in the software could allow an attacker to send commands to the robot, impersonating the control station and gaining unauthorized full control. The lack of encrypti...
EUVD-2019-14912
Malware in sbrugna...
EUVD-2024-53553
Malicious code in bioql PyPI...
EUVD-2022-34052
Malicious code in bioql PyPI...
CVE-2025-57278: Improper Authentication
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800B10ALKSLV01.01.02P42U1406 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or...
CVE-2024-53946: Cross-Site Request Forgery (CSRF)
The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery CSRF on its web management interface. This vulnerability allows an attacker to trick an authenticated admin user into performing unauthorized actions, such as exploiting a command injection vulnerability in...
CVE-2025-29653
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2025-29653
TP-Link M7450 4G LTE Mobile Wi‑Fi Router is affected by CVE-2025-29653 as reported in multiple sources (Red Hat and PT-2025-16890). The vulnerability is a SQL Injection in firmware version 1.0.2 Build 170306 Rel.1015n, exploitable via the username and password fields. The PT-2025-16890 descriptio...
PT-2025-16888
Name of the Vulnerable Software and Affected Versions TP-Link M7650 4G LTE Mobile Wi-Fi Router Firmware version 1.0.7 Build 170623 Rel.1022n Description A SQL Injection vulnerability exists in the TP-Link M7650 4G LTE Mobile Wi-Fi Router Firmware, allowing an unauthenticated attacker to inject...
PT-2025-16889 · Tp Link · Tp-Link M7000
Name of the Vulnerable Software and Affected Versions: TP-Link M7000 4G LTE Mobile Wi-Fi Router Firmware version 1.0.7 Build 180127 Rel.55998n Description: A SQL Injection vulnerability exists in the TP-Link M7000 4G LTE Mobile Wi-Fi Router Firmware, allowing an unauthenticated attacker to inject...