723 matches found
IMSI-catcher
IMSI-catcher Este programa te muestra los números IMSI, país, marca y operador de los teléfonos móviles a tu alrededor. /!\ Este programa fue creado para entender cómo funciona la red GSM. ¡No para hacer hacking malicioso! Lo que necesitas 1 PC con Gnu/Linux. Probado con : debian 10 Ubuntu...
SDK-SMS-Stack
SMS Stack Sms Stack 是一个框架，旨在为 GSM 短消息服务提供基于 TCP/IP 的特性。 该框架可在多种环境中运行，为服务提供完整的协议栈集成。 其主要层面包含用于控制给定数据流中短信顺序和数量的技术，以及采用 AES + CTR 加密的安全层面。 您可以在 Sms Stack 的协议栈之上轻松实现自己的协议，并为此类基于短信的设备间通信添加新功能。 前提条件 您可以在多种环境中下载并使用 sms-stack，以便在各种场景中实现它。 Typescript Npm - https://www.npmjs.com Nodejs -...
CVE-2021-27328
对 Yeastar TG400 GSM网关的路径遍历漏洞 - 91.3.0.3 这是CVE-2021-27328的概念验证（PoC） 示例 获取固件解密密码 http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmwaredetect 获取 /etc/paswd http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../etc/passwd...
EUVD-2026-80015
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567 mySCADA myPRO Manager Missing Authorization
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567
mySCADA myPRO Manager exposes an unauthenticated HTTP endpoint in its notification gateway that accepts a phone number and message to send SMS via a connected GSM modem. Because no credentials are required, any attacker with adjacent network access can trigger arbitrary SMS messages through the d...
CVE-2026-82567 mySCADA myPRO Manager Missing Authorization
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
mySCADA myPRO Manager
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
PT-2026-93183
Name of the Vulnerable Software and Affected Versions mySCADA myPRO Manager affected versions not specified Description The notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages via a connected GSM modem. Because the endpoint is accessible over the network and...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: “Revert ‘tty: ngsm: fix UAF in gsmcleanupmux’” This reversion involves commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239. The above commit was reverted because it did not solve the original issue. The function gsmcleanupmux attempt...
Astra Linux – Vulnerability in Wireshark
The GSM RP protocol dissector in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds access in gsm0receive The assumptions are as follows: - Side A configures ngsm in Basic Option Mode. - Side B sends a frame with a Basic Option Mode header, where the data length is 1. - Side...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A race condition was detected in the GSM 0710 tty multiplexor within the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled. It can lead to a use-after-free issue with the struct gsmdlci during the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: requires CAPNETADMIN to attach NGSM0710 ldisc. Any unprivileged user can attach to NGSM0710 ldisc, but it still requires CAPNETADMIN to create a GSM network. Additionally, it requires the initial namespace setting of...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: added a sanity check for gsm-receive in gsmreceivebuf A null pointer dereference can occur when attempting to access the “gsm-receive” function in gsmldreceivebuf. Currently, the code assumes that gsm-recieve is only...
ROS-20260714-73-0025
The vulnerability in the packet-gsmarp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark relates to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...
Systematic Cybersecurity Risk Analysis of European Rail Traffic Management System
European Rail Traffic Management System ERTMS is a widely adopted standard unifying train management in the EU. While the standard allows for use cases like fully autonomous driving, cybersecurity has been an afterthought. Risk analysis enables the systematic assessment and prioritization of...
CVE-2026-8266
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsmbuildpdusessionestablishmentaccept of the file /src/smf/gsm-build.c of the component SMF. The manipulation results in denial of service. The attack can be launched remotely. The exploit is now public and may be used...
EUVD-2026-29050
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsmhandlepdusessionmodificationqosflowdescriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attack may be launched...