154 matches found
samsung-android-lpe
第一部分：任意AT命令执行 CVE-2026-20980 在解锁设备中切换连接模式后，应用处理器AP命令由 atdistributor 管理。 root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor 通过函数 pacmcheckatcmds 验证AT命令 root@kitploit: void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1; data42c170 = SignalHandler; sigemptyset0x42c178;...
ATFuzzer
ATFuzzer «Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones» ha sido aceptado en la 35.ª Conferencia Anual de Aplicaciones de Seguridad Informática ACSAC 2019. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Resumen Este...
Astra Linux – Vulnerability in ofono
oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-12522
Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...
CVE-2026-12520
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
PT-2026-73233
damn so check this out... basically some crazy smart researchers found out that a bad SIM card can straight up hijack IoT devices like EV chargers and industrial routers using this sneaky old command called RUN AT. if an attacker gets physical access to stick a malicious card in there, it gives...
CVE-2025-69755
An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...
Exploit for CVE-2026-20980
Part 1: Arbitrary AT command execution CVE-2026-20980 Appl...
udev Persistence
This module will add a script in /lib/udev/rules.d/ in order to execute a payload written on disk. It'll be executed with root privileges everytime a network interface other than l0 comes up. Execution is triggered through at command, so it must be installed on the target. Module Options msf use...
CVE-2018-21092
An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...
CVE-2022-23728
Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011...
EUVD-2021-18583
Malware in sbrugna...
EUVD-2020-6055
Malware in sbrugna...
EUVD-2003-1063
Malware in sbrugna...
EUVD-2021-12206
Malware in sbrugna...
EUVD-2018-13610
Malware in sbrugna...
EUVD-2020-6054
Malware in sbrugna...