wigle-wifi-wardriving

WiGLE Wireless Wardriving Network stumbling client for Android, from wigle.net. This client provides geolocated detection and logging for WiFi, Bluetooth, and cellular signals using Android devices. As of January 2023, this application supports Android SDK versions 24 Nougat and up. For older...

QCSuper

QCSuper QCSuper 는 Qualcomm 기반 휴대폰 및 모뎀과 통신하는 도구로, 2G/3G/4G 원시일부 모델의 경우 5G 무선 프레임을 캡처 할 수 있게 해줍니다. 이를 통해 루팅된 Android 휴대폰, USB 동글 또는 다른 형식의 기존 캡처를 사용하여 PCAP 캡처 를 생성할 수 있습니다. 설치한 후에는 루팅된 휴대폰을 USB에 연결하고 호환 기기와 함께 사용하는 것은 다음과 같이 간단합니다:bash qcsuper --adb --wireshark-live 또는, 휴대폰에서 Diag port 노출을 수동으로 활성...

RayHunter-Web-Flasher

◈ RayHunter 설치 마법사 Orbic RC400L 핫스팟에EFF의 Rayhunter IMSI 캐처 탐지기를 플래시하는 대화형 단계별 가이드입니다. 자동으로 OS를 감지합니다. 🚀 마법사 실행 👉설치 마법사 열기 Rayhunter란? Rayhunter는 전자 프론티어 재단EFF이 개발한 IMSI 캐처셀 사이트 시뮬레이터 / 스팅레이 탐지용 오픈소스 도구입니다. 저렴한 Orbic RC400L 모바일 핫스팟약 $1530 USD에서 실행되며 셀룰러 트래픽을 모니터링하여 감시 징후를 찾아냅니다. 이 마법사는 Windows,...

Awesome-Cellular-Hacking

蜂窝网络入侵资源大全 面向 2G/3G/4G/5G 蜂窝安全研究与分析的精心策划的全面资源列表 本仓库整合了蜂窝安全领域的社区知识，包括漏洞利用、研究论文、工具和教育资源。目标是保存并整理那些原本可能难以找到的重要安全研究。 免责声明： 本信息仅供教育和防御性安全研究目的使用。请负责任地使用，并遵守适用的法律法规。 目录 入门 恶意基站 近期更新（2024-2025） 软件与工具 硬件配置 测试与研究方法 攻击向量 会议演讲 研究论文 设备与硬件 检测与防御 蜂窝物联网与 NB-IoT 安全 卫星与蜂窝融合 私有 5G 网络安全 网络切片与边缘安全 汽车与工业蜂窝网络 取证与调查 漏洞披...

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

CVE-2022-36779

CVE-2022-36779 산업용 셀룰러 라우터의 Proscend에서 인증되지 않은 OS 명령 주입Unauthenticated OS Command Injection을 위한 익스플로잇 코드. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.html...

CVE-2022-20607

CVE-2022-20607 Pixel 셀룰러 펌웨어에서 경계 검사 누락으로 인해 버퍼 경계를 벗어난 쓰기out of bounds write가 발생할 수 있습니다. 이로 인해 LTE 인증이 필요한 원격 코드 실행으로 이어질 수 있습니다. 악용을 위해 사용자 상호 작용은 필요하지 않습니다. 제품: Android 버전: Android kernel Android ID: A-238914868 참조: N/A 인증| 복잡성| 벡터 ---|---|--- 사용할 수 없음| 사용할 수 없음| 사용할 수 없음 기밀성| 무결성| 가용성...

CVE-2026-91191

The Lantronix G520 Series Cellular Gateway is vulnerable to an improper verification of cryptographic signatures in its update mechanism. During boot, the stock done function disables signature verification in the OPKG configuration before restoring packages from an unsigned feed. Furthermore, th...

CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-84409

The Lantronix G520 Series Cellular Gateway is vulnerable to a Cross-site Scripting (XSS) flaw in its update mechanism. The device retrieves update metadata over an unencrypted HTTP connection and stores it; a management interface then returns this data in a JSON response, which the web interface ...

The vulnerability of the Cellular Modem component in the Android operating system of Pixel phones allows attackers to bypass existing security measures and gain increased privileges.

The vulnerability of the Cellular Modem component in the Android operating system of Pixel phones is related to improper authorization. Exploiting this vulnerability allows a remote attacker to bypass existing security measures and gain increased privileges...

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 CVSS score: 8.0, is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error...

Google Pixel Improper Authorization Vulnerability

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

CVE-2026-58704

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56975

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56967

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...