CVE-2025-57819-exploit

CVE-2025-57819 — ثغرة حقن SQL قبل المصادقة في FreePBX تؤدي إلى تنفيذ أوامر عن بُعد RCE أداة استغلال شاملة لثغرة CVE-2025-57819 ، وهي حقن SQL غير مصادق عليه في وحدة endpoint الخاصة بـ FreePBX تؤدي إلى تنفيذ أوامر عن بُعد عبر حقن مهام cron. CVSS : 9.8 حرجة —...

CVE-2025-57819-POC

CVE-2025-57819 — حقن SQL في FreePBX → RCE PoC CVE-2025-57819 هي ثغرة حرجة من نوع حقن SQL في FreePBX تسمح لمهاجم غير مصادَق بتحقيق تنفيذ كود عن بُعد من خلال الربط بين حقن SQL وحقن مهام cron. ⚠️ إخلاء مسؤولية : هذا المستودع مخصص لأغراض الاختبارات الأمنية المصرح بها والتعليم فقط. الاستخدام غير المصرح...

CVE-2026-72590 alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-5...

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers. The malicious activity has been codenamed RedisRaider by Datadog Security Labs. "RedisRaider aggressively scans randomized portions of the IPv4 space and uses...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities

Exploit for multiple platform in category remote exploits 1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date...

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

Trend Micro Smart Protection Server Multiple Vulnerabilities 1. Advisory Information Title:: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities...