public-research

Nokia Deepfield ERT — 公開研究 Nokia Deepfield緊急対応チーム（ERT）による脅威研究。DDoSボットネットと関連インフラに焦点を当てています。各ディレクトリはボットネットファミリーをカバーし、簡単な概要と機械可読な侵害指標（IoC）を提供します。 このリポジトリは、これまでのコミュニティ研究とDeepfield ERT独自の分析を統合しています。参考文献と帰属については各READMEを参照してください。 注意: 指標は生の（無効化されていない）形式で提供されており、検出ツールで直接使用できます。URLやドメインの取り扱いには注意してください。...

MK4001MTD-USB-Bridge

MK4001MTD USBブリッジ 東芝MK4001MTD 0.85インチSDIOマイクロドライブをUSBマスストレージデバイスとしてブリッジするRP2040 Picoファームウェア。 MK4001MTDは、フラッシュストレージがまだかなり高価だった時代に、ノキアN91ミュージックフォンや一部のMP3プレーヤー、USBドライブなどのデバイスで元々使用されていた4GBのマイクロドライブです。...

reports

此文件夹包含我过去披露的一些漏洞报告。 Barracuda Networks Load Balancer ADC - 多个漏洞（CVE-2014-8426、CVE-2014-8428） Aruba ClearPass Policy Manager - 存储型XSS（CVE-2015-1389） Network Solution WebMail - 多个漏洞（负责任披露） Tuleap - SQL注入（CVE-2018-7538） Telecom Italia Bug Bounty Program - Ngeener Web - 多个漏洞，包括SQLi和认证绕过 -（已确认 - 待披露）...

CVE-2025-9974

CVE-2025-9974 PoC !CAUTION This script is provided for educational and defensive research purposes only. It is designed strictly for use against owned hardware in isolated, sandboxed testing environments. Do not use this tool against systems you do not own or have explicit permission to test. The...

CVE-2026-40465 An Open Re-direct Vulnerability in Nokia NSP

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40465

Nokia NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter. This vulnerability allows an attacker to potentially redirect users to an untrusted site. Exploitation details, specific affected versions, and remediation steps are not prov...

CVE-2026-40465 An Open Re-direct Vulnerability in Nokia NSP

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40464

The Nokia NSP is affected by a stored Cross-Site Scripting (XSS) vulnerability. The root cause is the insufficient validation or encoding of user-controlled input within a workflow application . An authenticated attacker with access to the application can embed malicious code that executes when v...

CVE-2026-40464 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2026-40464 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-7406

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-24815

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system...

CVE-2025-7406

Nokia MantaRay NM is susceptible to a sudo privilege escalation vulnerability. A local attacker with administrative (local admin) privileges can exploit this flaw to escalate to full root privileges on the host. Successful exploitation grants the attacker root-level access to the filesystem and t...

CVE-2025-7406 A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

EUVD-2025-210371

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-7406

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative local admin privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute...

CVE-2025-24816 An Improper Access Control vulnerability in Nokia MantaRay NM

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability caused by insufficient authorization within the API. This flaw could allow an authenticated attacker to retrieve confidential information that exceeds their assigned privileges. No specific details regarding affected versions, ...

EUVD-2025-210370

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...