Lucene search
+L

16971 matches found

RedhatCVE
RedhatCVE
•added 2025/03/30 5:49 p.m.•18 views

CVE-2025-2916

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated...

6.5CVSS6.3AI score0.01502EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/30 1:38 p.m.•42 views

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

5.3CVSS5.8AI score0.00323EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/30 12:00 a.m.•12 views

PT-2025-13628

Name of the Vulnerable Software and Affected Versions TRENDnet TI-G102i versions 1.0.7.S0 through 1.0.8.S0 Description A vulnerability was found in the HTTP Request Handler component, affecting the function plugins call handle uri raw of the file /usr/sbin/lighttpd. This issue leads to a null...

7.1CVSS5.9AI score0.00397EPSS
SaveExploits0References12
NVD
NVD
•added 2025/03/28 5:15 p.m.•22 views

CVE-2025-2916

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated...

6.5CVSS0.01502EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/03/28 5:00 p.m.•43 views

CVE-2025-2916 Aishida Call Center System amr2mp3 command injection

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated...

6.5CVSS0.01502EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/28 5:00 p.m.•14 views

CVE-2025-2916 Aishida Call Center System amr2mp3 command injection

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated...

6.5CVSS6.3AI score0.01502EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/28 5:00 p.m.•75 views

CVE-2025-2916

CVE-2025-2916 affects Aishida Call Center System up to 20250314. The issue arises from command injection when the File argument is manipulated within the /doscall/weixin/open/amr2mp3 processing path. The attack can be initiated remotely over the network, and public exploitation is disclosed. Vend...

6.5CVSS6.3AI score0.01502EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/28 1:15 p.m.•21 views

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

5.3CVSS0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/28 12:32 p.m.•16 views

CVE-2025-2908 Insufficiently Protected Credentials vulnerability in MeetMe products

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...

8.5CVSS5.8AI score0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 12:32 p.m.•51 views

CVE-2025-2908 Insufficiently Protected Credentials vulnerability in MeetMe products

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...

8.5CVSS0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/28 12:32 p.m.•74 views

CVE-2025-2908

CVE-2025-2908 concerns MeetMe products with a vulnerability in the call forwarding configuration module where credentials can be exposed via configuration files in versions prior to 2024-09. This is supported by multiple sources in the connected set (NVD/Red Hat/CIRC L/NVD entries). Impact stated...

8.5CVSS5.8AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•17 views

Aishida Call Center System has a vulnerability

Aishida Call Center System is a call center system from Aishida China. An injection vulnerability exists in Aishida Call Center System 20250314 and prior versions, which originates from a command injection that could remotely launch an attack...

6.5CVSS6.7AI score0.01502EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•11 views

CVE-2025-2916: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated...

6.5CVSS6.3AI score0.01502EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•6 views

CVE-2025-2911: Improper Restriction of Excessive Authentication Attempts

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

5.3CVSS5.8AI score0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•9 views

PT-2025-13552

Name of the Vulnerable Software and Affected Versions Aishida Call Center System versions up to 20250314 Description A critical issue has been found in the Aishida Call Center System, affecting some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the File argument...

6.5CVSS6.2AI score0.01502EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•11 views

PT-2025-13512

Name of the Vulnerable Software and Affected Versions MeetMe products versions prior to 2024-09 Description The issue concerns the exposure of credentials in the call forwarding configuration module, allowing an attacker to gain access to important assets via configuration files. Recommendations...

8.5CVSS5.8AI score0.00183EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•8 views

PT-2025-13515

Name of the Vulnerable Software and Affected Versions MeetMe products versions prior to 2024-09 Description The issue allows unauthorized access to the call forwarding service system, enabling an attacker to identify multiple users and perform brute force attacks via extensions. Recommendations F...

5.3CVSS5.8AI score0.00323EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•20 views

MeetMe security vulnerabilities

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09 that stems from unauthorized access to the Call Forwarding Service system, which could be brute force attacked via an extension number...

5.3CVSS5.7AI score0.00323EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•9 views

CVE-2025-2908: Insufficiently Protected Credentials

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...

8.5CVSS5.8AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•23 views

MeetMe security vulnerabilities

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09, which stems from a call forwarding configuration module credential disclosure that could allow access to critical assets via configuration files...

8.5CVSS5.7AI score0.00183EPSS
SaveExploits0References1
Rows per page
Query Builder