public-research

Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...

MK4001MTD-USB-Bridge

MK4001MTD USB Bridge RP2040 Pico firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB Mass Storage device. The MK4001MTD is a 4 GB Microdrive originally used in the Nokia N91 music phone and some other devices, like MP3 players or USB drives, back when flash storage was still...

reports

Esta carpeta contiene algunos informes de vulnerabilidades que he divulgado a lo largo del tiempo. Barracuda Networks Load Balancer ADC - Múltiples vulnerabilidades CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - XSS almacenado CVE-2015-1389 Network Solution WebMail - Múltiples...

CVE-2025-9974

CVE-2025-9974 PoC !CAUTION This script is provided for educational and defensive research purposes only. It is designed strictly for use against owned hardware in isolated, sandboxed testing environments. Do not use this tool against systems you do not own or have explicit permission to test. The...

CVE-2026-40465 An Open Re-direct Vulnerability in Nokia NSP

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40465

Nokia NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter. This vulnerability allows an attacker to potentially redirect users to an untrusted site. Exploitation details, specific affected versions, and remediation steps are not prov...

CVE-2026-40465 An Open Re-direct Vulnerability in Nokia NSP

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40464 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2026-40464

The Nokia NSP is affected by a stored Cross-Site Scripting (XSS) vulnerability. The root cause is the insufficient validation or encoding of user-controlled input within a workflow application . An authenticated attacker with access to the application can embed malicious code that executes when v...

CVE-2026-40464 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-7406

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-24815

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system...

CVE-2025-7406 A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

EUVD-2025-210371

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-7406

Nokia MantaRay NM is susceptible to a sudo privilege escalation vulnerability. A local attacker with administrative (local admin) privileges can exploit this flaw to escalate to full root privileges on the host. Successful exploitation grants the attacker root-level access to the filesystem and t...

CVE-2025-7406

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-24816 An Improper Access Control vulnerability in Nokia MantaRay NM

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-24816 An Improper Access Control vulnerability in Nokia MantaRay NM

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability caused by insufficient authorization within the API. This flaw could allow an authenticated attacker to retrieve confidential information that exceeds their assigned privileges. No specific details regarding affected versions, ...