CVE-2024-41713-PoC-exploit

CVE-2024-41713-PoC-exploit Mitel MiCollab Authentication Bypass to Arbitrary File Read root@kitploit: ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody root@kitploit: ❯ cat...

cve-2024-CVE-2024-41713

cve-2024-CVE-2024-41713 cve-2024-CVE-2024-41713...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab...

Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

CVE-2026-41713

creationtimestamp| type| source ---|---|--- 2026-05-11 09:04:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-443 2026-05-11 12:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mllabzqe2i2x 2026-05-12 11:59:24+00:00| seen|...

CVE-2025-41713

creationtimestamp| type| source ---|---|--- 2025-09-15 08:03:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lyudnqaimac2 2025-09-15 10:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyukktjkgn2c...

CVE-2022-41713

deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the 'proto' property to be edited...

Exploit for Path Traversal in Mitel Micollab

CVE-2024-41713-PoC-exploit Mitel MiCollab Authentication Bypas...

Exploit for Path Traversal in Mitel Micollab

CVE-2024-41713 Scanner This repository contains a Python scri...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713link is external Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550link is external Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883lin...

Mitel MiCollab Path Traversal Vulnerability

Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated,...

Exploit for Path Traversal in Mitel Micollab

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitr...

CVE-2024-41713

creationtimestamp| type| source ---|---|--- 2024-10-11 06:14:27+00:00| seen| https://t.me/CyberBulletin/26067 2024-10-11 06:14:28+00:00| seen| https://t.me/CyberBulletin/1153 2024-10-22 00:24:14+00:00| seen| https://t.me/cvedetector/8572 2024-12-05 11:43:11+00:00| confirmed|...

SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-41713

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:41+00:00| seen| https://t.me/cibsecurity/72463...

CVE-2023-41713

SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function...

CVE-2023-41713

CVE-2023-41713 – SonicOS vulnerability: Use of a hard-coded password in the internal dynHandleBuyToolbar demo function. Documented in multiple sources (NVD, SonicWall PSIRT SNWLID-2023-0012). Affected product: SonicOS firmware used on SonicWall devices. Impact is described as high confidentiality...

@backland/accounts (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221123222206.0), @backland/entity (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221101T193006-0300.54) +29 more potentially affected by CVE-2022-41713 via deep-object-diff (1.1.7)

deep-object-diff NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on deep-object-diff and may be impacted: - @backland/accounts =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0,...

CVE-2022-41713

creationtimestamp| type| source ---|---|--- 2022-11-03 23:25:55+00:00| published-proof-of-concept| https://t.me/cibsecurity/52533...

CVE-2022-41713 deep-object-diff 1.1.0 - Prototype Pollution

deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the 'proto' property to be edited...