cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

dlink

Iniezione di comandi e account backdoor nei dispositivi NAS D-Link Riepilogo della vulnerabilità: La vulnerabilità descritta interessa diversi dispositivi NAS D-Link, inclusi i modelli DNS-340L, DNS-320L, DNS-327L e DNS-325, tra gli altri. La vulnerabilità risiede nell'URI nassharing.cgi , che è...

Zyxel NAS zylog RCE (CVE-2023-27992)

Exploits CVE-2023-27992 in Zyxel NAS: pre-auth command injection via configuremailsyslog after auth-bypass path /cmd,/ck6fup6/zylogmain/. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS zylog pre-auth command injection CVE-2023-27992.""" import re import urllib.parse from kittysploit impor...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 - D-Link Remote Code Execution RCE 💥 A critical vulnerability, classified as CVE-2024-3273, was discovered in several D-Link NAS devices, including DNS-320L, DNS-325, DNS-327L, and DNS-340L, up to the date of 20240403. This vulnerability affects an unknown function of the file...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo contains a proof-of-concept PoC exploit for a critical vulnerability affecting D-Link NAS devices. The bug, tracked as CVE-2024-10914 , impacts the following models: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L The...

CVE-2026-96274

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

EUVD-2026-89358

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274

The Baicells Nova 430H is vulnerable to a denial-of-service (DoS) condition where an unauthenticated device within radio range can send a malformed uplink message during connection setup. The flaw exists because the eNodeB fails to properly validate an invalid NAS payload , leading it to forward ...

PT-2026-102886

Name of the Vulnerable Software and Affected Versions Baicells Nova 430H versions prior to 3.0.13 Description An unauthenticated device within radio range can send a malformed uplink message during connection setup containing an invalid NAS Non-Access Stratum payload. The eNodeB fails to properly...

CVE-2026-96274: Uncaught Exception

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

PT-2026-99837

Name of the Vulnerable Software and Affected Versions aligungr UERANSIM versions prior to 3.3.0 Description A flaw in the nr-gnb component allows a remote attacker to cause an uncaught exception by manipulating the DecodePlainMmMessage function within the src/lib/nas/encode.cpp library...

openSUSE 16: libosmo-hnbap-devel / libosmo-hnbap0 / libosmo-ranap-devel / etc (openSUSE-SU-2026:21954-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21954-1 advisory. Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607. Tenable has extracted the preceding description block direct...

Security update for osmo-iuh (important)

openSUSE security update: security update for osmo-iuh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21954-1 Rating: important References: bsc1281607 Cross-References: CVE-2026-75894 Affected Products: openSUSE Leap 16.0...

OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh

This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...

SUSE CVE-2026-75894

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranaphandlecodt function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service...