Silent-Call

Silent;Call Root remoto sin autenticación previa en Cisco Unified Communications Manager 15.x Tres solicitudes HTTP. Cero credenciales. Acceso root. Cada llamada ahora es tuya. Kill Chain Paso| Componente| Descripción ---|---|--- 1| Spoofhack| La suplantación de la cabecera X-Forwarded-For elude ...

iCULeak.py

iCULeak.py 用于在 Cisco CUCM Call Manager 管理的环境中查找并提取电话配置文件中的凭据的工具。 使用 Cisco CUCM Call Manager 时，电话配置文件存储在 TFTP 服务器上。这些 VoIP 电话配置文件经常包含敏感数据，包括电话 SSH/管理员凭据。 此外，还存在一个与某些浏览器行为相关的问题：如果管理员在浏览器中保存了其 CUCM 凭据（通常是 AD 凭据），浏览器会自动填写 SSH 用户名和密码字段 。使用自动填充凭据的密码管理器的管理员也遇到了类似问题，他们发现自己的凭据被自动填入 SSH...

cisco-security-research

Cisco Security Research Investigador: 0xReadingSteiner Contacto: [email protected] Proveedor: Cisco Systems, Inc. Proveedor notificado: 2026-08-04 Cisco PSIRT, ZDI, SSD Respuesta del proveedor: Ninguna Por qué existe esto La investigación de seguridad independiente sobre productos Cisco...

iCULeak - Tool To Find And Extract Credentials From Phone Configuration Files Hosted On Cisco CUCM

Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM Call Manager. When using Cisco's CUCM Call Manager, phone configuration files are stored on a TFTP server. These phone configuration files quite frequently contain sensitive data, including...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051...

Cisco CUCM Directory Traversal / Reversible Obfuscation

Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 08.11.2011 Vendor: Cisco Systems Product: CUCM Environment Cisco Unified Communications Manager CallManager Cisco IP Phone CP-7975G Vulnerability: Directory Traversal Reversible Obfuscation Algorithm SCCP service...

Directory traversal

Directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

Code injection

The Packet Capture Service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service memory consumption and restart by making many connections, aka Bug ID CSCtf97162...

Memory corruption

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, aka Bug ID...

Memory corruption

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug I...

CVE-2008-1743

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, aka Bug ID...

CVE-2008-1743

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, aka Bug ID...