SigPloit

List of Contributors Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloitは、テレコムセキュリティの専門家や研究者が、現在使用されている世代に関係なく、モバイルオペレーターで使用されるシグナリングプロトコルの脆弱性をペンテストし悪用するためのシグナリングセキュリティテストフレームワークです。...

DRA_writeup

Oracle DSR의 보안 취약점 KPN CISO REDteam KPN은 네덜란드에 위치한 통신 사업자입니다. CISO REDteam은 2013년에 도입된 KPN의 윤리적 해킹 팀입니다. 이 팀은 KPN 애플리케이션 및 서비스의 보안 테스트에 참여하여 고객 데이터가 무단 액세스, 수정 및 데이터 손실로부터 안전하게 보호되도록 합니다. Diameter Routing Agent 배경 KPN은 네덜란드에서 가장 큰 모바일 네트워크를 운영합니다. KPN이 운영하는 4G 네트워크의 구성 요소 중 하나는 Oracle Diameter...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – 5GにおけるDiameterプロトコルのCredit‑Controlバイパス プログラムコード（Python Diameterシミュレータ） diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit return...

CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

DEBIAN-CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

UBUNTU-CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93962

CVE-2026-93962 is a heap-based buffer overflow in the CDP Diameter Receiver module of Kamailio (affected versions up to 5.8.8, 6.0.7, 6.1.4, and 6.2.0-dev1). The vulnerable function is shm_malloc in src/modules/cdp/receiver.c. The flaw can be triggered remotely without authentication or user inte...

EUVD-2026-83651

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93962 Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93962 Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93962 Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

PT-2026-95909

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 6.0.8 Description A heap-based buffer overflow can be triggered remotely within the CDP Diameter Receiver component. The issue resides in the shm malloc function located in the src/modules/cdp/receiver.c file. A...

Linux Distros Unpatched Vulnerability : CVE-2026-93962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file...

CVE-2026-93962: Heap-based Buffer Overflow

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

sigcorr

SigCorr Passive Cross-Protocol Attack Detection for Mobile Core Networks SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber identity correlation. Features Cross-protocol correlation — Links SS7/MAP,...

SUSE CVE-2026-54345

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header...

GO-2026-6121 GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket

GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded 4 GiB allocation unauthenticated remote DoS in github.com/gopacket/gopacket...

CVE-2025-15687

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...