Dotouch Patches Session Hijacking Flaw in XproUPF
Dotouch, a vendor of 5G core network solutions, addressed a session hijacking vulnerability in its XproUPF product, tracked as CVE-2026-8233. The flaw…
Tag: session hijacking
Open5GS Affected by 84 Flaws in 4G/5G Core Networks
Open5GS, an open-source implementation of 4G and 5G core networks, was one of the seven implementations analyzed in the study. It was…
free5GC Flaws Expose 5G Core Networks to Attacks
free5GC, an open-source 5G core network implementation, was among the affected systems in the study. The vulnerabilities could allow attackers to cause…
XproUPF Session Hijacking Vulnerability (CVE-2026-8233)
XproUPF, a product by Dotouch, was found to contain a session hijacking vulnerability (CVE-2026-8233) that could allow an attacker to redirect a…
84 Flaws Found in 4G and 5G Core Networks, Including Session Hijacking Vulnerability
Researchers from Singapore's Nanyang Technological University have disclosed a widespread class of security vulnerabilities affecting 4G and 5G core networks. The study,…
CVE-2026-8233: Session Hijacking Vulnerability in Dotouch XproUPF
CVE-2026-8233 is a session hijacking vulnerability discovered in Dotouch's XproUPF, a 5G core network User Plane Function. The flaw allows an attacker…
OctoLink Live (Kali365 Live) Desktop Application
OctoLink Live is a desktop application used with Kali365 to launch Chromium browser sessions and access victim mailboxes in OWA, OneDrive, SharePoint,…
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
Cybersecurity researchers at Sand Security have disclosed a now-patched critical session isolation vulnerability in Writer, an enterprise generative AI platform. The flaw,…
Writer: Enterprise Generative AI Platform
Writer is an enterprise generative AI platform that provides AI-powered writing and content generation tools. The company recently patched a critical session…