55 matches found
nimbostratus-target
Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...
CVE-2026-25264
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-25265
Privilege escalation due to weak configuration while temporary file handling...
EUVD-2026-84348
Privilege escalation due to weak configuration while temporary file handling...
EUVD-2026-84347
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-25264: Uncontrolled Search Path Element
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
EUVD-2026-52735
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084: Insecure Security Identifier Mechanism
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
PT-2026-47822
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Insufficient configuration management allows authenticated administrators connected to the local network to tamper with the system. Recommendations At the moment...
CVE-2025-47383
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383 Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383
CVE-2025-47383 describes a weak configuration that may cause a cryptographic issue when a VoWiFi call is triggered from UE. Connected records repeat the description and list a CVSS v3.1 base score of 7.2 (HIGH) with NETWORK attack vector, low attack complexity, and high impact on confidentiality,...
EUVD-2025-208190
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
PT-2026-22646
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A weak configuration can result in a cryptographic issue when a VoWiFi call is initiated from a User Equipment UE. Recommendations At the moment, there is no information about a newer version that...