The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

M3UAScan

M3UAScan Sigtranをサポートするノードを検出するためのM3UAプロトコルスキャナ M3UAは、IETFのSIGTRANワーキンググループによりRFC 4666で定義されたMTPレベル3（MTP3）ユーザー適応層を表します。M3UAは、SS7プロトコルのユーザーパート（例：ISUP、SCCP、TUP）を、ISDNやPSTNなどの電話機器の代わりにIP上で動作させることを可能にします。M3UAの伝送にはSCTPのサービスを使用することを推奨します。...

Telesquare TLR-2005KSH - Remote Command Execution

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from South Korea's Telesquare company.Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 have an unauthorized remote command execution vulnerability. An attacker can exploit this vulnerability to execute system commands without authorization through...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

TLPE

这是 CVE-2026-49881 的 PoC 和 writeup，该漏洞是 Android 17 Telecom 服务中 InCallController 类的一个逻辑问题，允许无特权的应用在无需额外用户交互的情况下，以 UID 1000 systemserver 的身份获得任意代码执行能力。我们在此还展示了，即使在现代 Android 版本中，systemserver 代码执行仍然可以轻松地用于获得持久化。 我于 2026-04-10 向 Android 安全团队报告了此漏洞，于 2026-05-06 被确认，并在 2026 年 9 月的 Android 安全公告中修复。（补丁见此处...

LSPromise

LSPromise Una cadena de explotación completa que permite la escalada de privilegios desde una aplicación local no confiable hasta root/kernel. No implica corrupciones de memoria ni condiciones de carrera, por lo que los atacantes no necesitan realizar complejos heap spraying ni evadir mitigacione...

Helpdesk-Telecom-CVE-2025-64459

准备仓库下载 1. 更新软件包： sudo apt update 2. 如有需要，安装git： sudo apt install -y git 3. 需要设置端口转发规则。在 Debian 12.11.0 虚拟机的“网络”设置中，点击“端口转发”。 4. 添加规则： 名称：Django； 协议：TCP； 主机地址：空； 主机端口：8000； 主机地址：空； 客户机端口：8000。 下载仓库，安装易受攻击的Web应用程序 1. 克隆仓库： git clone https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459.git 2...

Exploit for CVE-2026-49881

This is a PoC and a writeup for CVE-2026-49881, a logic issue in...

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods. The latest ThreatsDay Bulletin puts all of these short updates ...

New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD. According to Acronis Threat Research Unit TRU, the backdoor is a compiled C/C++ implant delivered ...

SUSE CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

SUSE CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...

SUSE CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...

CVE-2026-58227

creationtimestamp| type| source ---|---|--- 2026-07-28 17:22:23+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

DEBIAN-CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...

DEBIAN-CVE-2026-47078

Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...

CVE-2026-59250

CVE-2026-59250 describes a Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver. During tokenization of Local/Remote descriptors, mfs_load_property_groups extracts an attacker-controlled property name and, when no value follows, formats it into a fixed 512-byte error_msg field u...