cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ Un potente conjunto de herramientas Nuclei para detectar y validar la crítica vulnerabilidad de omisión de autenticación en FreePBX. 📖 Tabla de Contenidos Haga clic para expandir Acerca de Este Proyecto Características Clave Desglose de la Vulnerabilidad...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters. 🛡️ Uses error-based , boolean-based , and time-based techniques to flag potential injection without modifying the database. ✍️ Per-parameter verdicts + clean...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...

CVE-2026-46376

CVE-2026-46376 — FreePBX Unauthenticated UCP Access via Hard-Coded Credentials A critical vulnerability in FreePBX's User Management userman module allows unauthenticated attackers to access the User Control Panel UCP using hard-coded credentials that are embedded during the UCP generic template...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Unauthenticated Summary FreePBX versions 15, 16, and 17 contain a Remote Code Execution RCE vulnerability caused by insufficient sanitization of user-supplied data in endpoints. An unauthenticated attacker can manipulate the database and achieve remote code execution. Exploit...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — SQLi no autenticado a RCE Exploit de prueba de concepto que encadena dos vulnerabilidades de FreePBX para pasar de acceso nulo a ejecución remota de código en FreePBX 16. CVE| Componente| Impacto ---|---|--- CVE-2025-57819| Cargador del módulo Endpoint parámetro brand| Inyección SQL...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module...

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

watchTowr-vs-FreePBX-CVE-2025-57819

CVE-2025-57819 FreePBX Pre-Auth RCE FreePBX Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to upload the php script or adds a new user if the upload fails. $ python3 watchTowr-vs-FreePBX-CVE-2025-57819.py -H http://freepbx.lab.local /...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – FreePBX Unauthenticated SQL Injection to RCE PoC This repository contains two Python Proof-of-Concept PoC scripts targeting CVE-2025-57819 , a critical unauthenticated SQL injection vulnerability in FreePBX. 🧠 About the Vulnerability CVE-2025-57819 CVE-2025-57819 affects...

CVE-2025-57819-POC

CVE-2025-57819 — Inyección SQL en FreePBX → PoC de RCE CVE-2025-57819 es una vulnerabilidad crítica de inyección SQL en FreePBX que permite a un atacante no autenticado lograr la ejecución remota de código encadenando una inyección SQL con la inyección de trabajos cron. ⚠️ Aviso legal : Este...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE Severity: Critical Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module Tested On: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Overview An unauthenticated SQL injection...

lab-cve-2025-57819

Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi → RCE Chain Nuclei POC Spin up a reproducible FreePBX 15 lab Docker to validate CVE-2025-57819 — a critical unauthenticated SQL injection in userman AJAX endpoints that can be chained to RCE. Includes a working Nuclei template...

CVE-2010-3490

CVE-2010-3490 FreePBX exploit = 2.8.0...

CVE-2025-57819

CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE Unauthenticated stacked SQL injection in the FreePBX Endpoint Manager module admin/ajax.php, brand parameter, CVE-2025-57819, affecting FreePBX framework --vhost --root --cmd How it works 1. Confirm the SQL injectio...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX: From Unauthenticated SQL Injection to Root Shell CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Executive Summary This walkthrough documents the complete compromise of the HTB machine Connected. The attack chain begins with an unauthenticated SQL injection vulnerability in FreePBX,...

CVE-2025-57819

CVE-2025-57819 Overview of this vulnerability quoted from @jfinstrom here Around 2025-08-21 multiple FreePBX systems began showing errors and later confirmed compromises. Vendor Sangoma/FreePBX Security Team published an advisory on 2025-08-26 urging administrators to restrict public access to th...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...