723 matches found
IMSI-catcher
IMSI-catcher このプログラムは、あなたの周りの携帯電話のIMSI番号、国、ブランド、通信事業者を表示します。 /!\ このプログラムはGSMネットワークの仕組みを理解するために作られました。悪用するためではありません！ What you need Gnu/Linuxを搭載したPC 1台。動作確認済み: debian 10 Ubuntu 20.04/LinuxMint 22.2+ Kali 2025+ SDR受信機 1台。動作確認済み: アンテナ付きUSB DVB-Tキー RTL2832U 15ドル未満 OsmocomBB phone HackRF BladeRF Setup...
SDK-SMS-Stack
SMS Stack Sms Stack は、GSMショートメッセージサービスにTCP/IPベースの特性を提供するフレームワークです。 このフレームワークは複数の環境で動作し、サービス内でのフルスタック統合を提供します。 メインレイヤーは、特定のストリームに対するSMSの順序と数を制御する技術と、AES + CTR暗号によるセキュリティレイヤーを特徴としています。 Sms Stack のスタック上に独自のプロトコルを簡単に実装し、デバイス間のSMSベースの通信に新しい機能を追加できます。 前提条件 sms-stack は複数の環境でダウンロードして使用でき、さまざまなシナリオに実装できます...
CVE-2021-27328
Yeastar TG400 GSM Gateway におけるパストラバーサル - 91.3.0.3 これは CVE-2021-27328 の Proof of Concept です 例 ファームウェア復号化パスワードを取得する http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmwaredetect /etc/passwd を取得する http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../etc/passwd...
EUVD-2026-80015
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567 mySCADA myPRO Manager Missing Authorization
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
CVE-2026-82567
mySCADA myPRO Manager exposes an unauthenticated HTTP endpoint in its notification gateway that accepts a phone number and message to send SMS via a connected GSM modem. Because no credentials are required, any attacker with adjacent network access can trigger arbitrary SMS messages through the d...
CVE-2026-82567 mySCADA myPRO Manager Missing Authorization
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...
mySCADA myPRO Manager
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
PT-2026-93183
Name of the Vulnerable Software and Affected Versions mySCADA myPRO Manager affected versions not specified Description The notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages via a connected GSM modem. Because the endpoint is accessible over the network and...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: “Revert ‘tty: ngsm: fix UAF in gsmcleanupmux’” This reversion involves commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239. The above commit was reverted because it did not solve the original issue. The function gsmcleanupmux attempt...
Astra Linux – Vulnerability in Wireshark
The GSM RP protocol dissector in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds access in gsm0receive The assumptions are as follows: - Side A configures ngsm in Basic Option Mode. - Side B sends a frame with a Basic Option Mode header, where the data length is 1. - Side...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A race condition was detected in the GSM 0710 tty multiplexor within the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled. It can lead to a use-after-free issue with the struct gsmdlci during the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: requires CAPNETADMIN to attach NGSM0710 ldisc. Any unprivileged user can attach to NGSM0710 ldisc, but it still requires CAPNETADMIN to create a GSM network. Additionally, it requires the initial namespace setting of...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: added a sanity check for gsm-receive in gsmreceivebuf A null pointer dereference can occur when attempting to access the “gsm-receive” function in gsmldreceivebuf. Currently, the code assumes that gsm-recieve is only...
ROS-20260714-73-0025
The vulnerability in the packet-gsmarp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark relates to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...
Systematic Cybersecurity Risk Analysis of European Rail Traffic Management System
European Rail Traffic Management System ERTMS is a widely adopted standard unifying train management in the EU. While the standard allows for use cases like fully autonomous driving, cybersecurity has been an afterthought. Risk analysis enables the systematic assessment and prioritization of...
CVE-2026-8266
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsmbuildpdusessionestablishmentaccept of the file /src/smf/gsm-build.c of the component SMF. The manipulation results in denial of service. The attack can be launched remotely. The exploit is now public and may be used...
EUVD-2026-29050
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsmhandlepdusessionmodificationqosflowdescriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attack may be launched...