CVE-2010-3490

CVE-2010-3490 FreePBX Exploit = 2.8.0...

CVE-2025-64328_FreePBX-framework-Command-Injection

CVE-2025-64328 FreePBX में प्रमाणित कमांड इंजेक्शन framework मॉड्यूल में CVE-2025-64328 FreePBX में framework मॉड्यूल में प्रमाणित कमांड इंजेक्शन के लिए सरल प्रूफ ऑफ कॉन्सेप्ट रिपॉजिटरी। पूरा लेख यहाँ: https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl प्रूफ ऑफ...

FreePBX-Reverse-Shell-Module

FreePBX-Reverse-Shell-Module...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi não autenticado → RCE Exploit de disparo único para a injeção SQL não autenticada do Endpoint Manager do FreePBX CVE-2025-57819, encadeada em execução remota de código por meio da tabela cronjobs do FreePBX. Apenas para testes de segurança autorizados / uso em CTF...

CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX

FreePBX CVE-2025 Schwachstellen-Scanner ⚠️ HAFTUNGSAUSSCHLUSS NUR FÜR BILDUNGSZWECKE UND AUTORISIERTE TESTS Dieses Tool wird „WIE BESEHEN“ ausschließlich für Bildungs- und Forschungszwecke bereitgestellt Die Autoren sind NICHT verantwortlich für Missbrauch oder illegale Aktivitäten Unautorisierter...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — SQLi non autenticata a RCE Proof-of-concept exploit che incatena due vulnerabilità di FreePBX per passare da accesso zero a esecuzione di codice remoto su FreePBX 16...

cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ Un potente toolkit Nuclei per rilevare e convalidare la vulnerabilità critica di bypass dell'autenticazione di FreePBX. 📖 Indice dei contenuti Clicca per espandere Informazioni sul Progetto Caratteristiche Principali Analisi della Vulnerabilità Template in...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Combina CVE-2025-57819 SQL injection a query impilate e CVE-2025-61678 caricamento di file autenticato in FreePBX Endpoint Manager per ottenere Esecuzione Remota di Codice RCE. Solo per uso educativo. Riferimenti:...

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 Questo repository documenta tre vulnerabilità di sicurezza scoperte in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, inclusi analisi, impatto e dettagli di proof-of-concept per scopi di ricerca e sensibilizzazione sulla sicurezza. Descrizione CVEs 🔴...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Zusammenfassung FreePBX ist die Open-Source-Web-GUI für Asterisk PBX, die in Unternehmens-Telefonieumgebungen weit verbreitet ist. Das Endpoint Manager -Modul stellt einen AJAX-Handler unter /admin/ajax.php bereit, der...

FreePBX - Remote Code Execution

FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Não Autenticado Resumo As versões 15, 16 e 17 do FreePBX contêm uma vulnerabilidade de Execução Remota de Código RCE causada por sanitização insuficiente de dados fornecidos pelo usuário em endpoints. Um atacante não autenticado pode manipular o banco de dados e obter execução...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX: From Unauthenticated SQL Injection to Root Shell...

CVE-2026-73662

A flaw was found in the FreePBX Music on Hold module. An authenticated administrator can exploit dangerous command-line options when configuring media players, such as /usr/bin/mpg123. This allows the administrator to execute arbitrary commands as the asterisk service user by writing files, openi...

Hack-The-Box-Connected-Full-Machine-Walkthrough

Hack The Box — Connected Platform: Hack The Box Mac...

Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager

cve-2025-5781FreePBX In August 2025, a critical vulnerabilit...

CVE-2026-73665

FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.usecheckAuth in node/lib/server.js, but Socket.IO version 4 applies that middleware only to the default namespace. An unauthenticated client can connect to custom namespaces that do not...

CVE-2026-73664

FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...

CVE-2026-73660

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

CVE-2026-73661

FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in ampconf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...