50 matches found
oppo-pgem10-ghostlock
OPPO Find X6 Pro GhostLock Проект адаптации Обзор Данный проект посвящен адаптации уязвимости CVE-2026-43499 GhostLock на устройстве OPPO Find X6 Pro PGEM10. Основан на архитектуре оригинального эксплойта NebuSec CyberMeowfia с использованием подхода к адаптации из oppo-ghostlock. Информация об...
CVE-2026-52483
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...
CVE-2026-52483: Improper Neutralization of Special Elements used in an OS Command
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...
CVE-2026-52483
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...
CVE-2026-52483
CVE-2026-52483 affects the MitraStar GPT-2741GNAC-N2-SV router running firmware BR_g8.10_1.11(WVK.0)b46 . The ping diagnostics and similar functions are vulnerable to arbitrary OS command execution by authenticated users who send a crafted POST request to /cgi-bin/device-management-utilities-inte...
EUVD-2026-82467
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...
EUVD-2026-68292
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...
CVE-2026-82589
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...
CVE-2026-82589 Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...
CVE-2026-82589
Open5GS (up to 2.7.7) contains a denial-of-service vulnerability in the N1-N2 Message Handler component, specifically in the function amf_namf_comm_handle_n1_n2_message_transfer within src/amf/namf-handler.c. Manipulation of the field N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoConten...
CVE-2026-82589 Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...
PT-2026-83636
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A flaw in the N1-N2 Message Handler component allows a remote attacker to cause a denial of service. This occurs through the manipulation of the ngapIeType variable within the...
EUVD-2026-32556
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command,...
GHSA-VRRX-58H3-PRMH Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover
Summary The AMF in Free5GC v4.2.1 does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command, and vice versa. This can lead to mismatches between NAS and AS...
Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover
Summary The AMF in Free5GC v4.2.1 does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command, and vice versa. This can lead to mismatches between NAS and AS...
PT-2026-38367
Name of the Vulnerable Software and Affected Versions free5GC versions prior to 4.2.2 Description The Access and Mobility Management Function AMF in free5GC fails to enforce concurrent security procedure rules. Specifically, the AMF does not verify if an N2 handover procedure is ongoing before...
CVE-2026-33904
Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denia...
CVE-2026-33904 Ella Core has a Denial of Service via SCTP connection cleanup deadlock
Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denia...
Mitrastar GPT-2741GNAC-N2 安全漏洞
Mitrastar GPT-2741GNAC-N2 is a home gateway device from China-based Allied Technology Mitrastar. A security vulnerability exists in the Mitrastar GPT-2741GNAC-N2 that originates from a root shell that can be obtained via specific command parameters...
