CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX: неаутентифицированный SQLi до RCE Универсальный эксплойт для CVE-2025-57819 , неаутентифицированная SQL-инъекция в модуле endpoint FreePBX, которая приводит к удаленному выполнению кода через внедрение задачи cron. CVSS : 9.8 Критический —...

CVE-2025-57819-POC

CVE-2025-57819 — SQL-инъекция в FreePBX → RCE PoC CVE-2025-57819 — это критическая уязвимость SQL-инъекции в FreePBX, которая позволяет неаутентифицированному злоумышленнику добиться удалённого выполнения кода путём объединения SQL-инъекции с инъекцией cron-задач. ⚠️ Отказ от ответственности : Это...

CVE-2026-72590 alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-5...

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers. The malicious activity has been codenamed RedisRaider by Datadog Security Labs. "RedisRaider aggressively scans randomized portions of the IPv4 space and uses...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

PT-2018-5618

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system. Recommendations: For versions 3.2...

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities

Exploit for multiple platform in category remote exploits 1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date...

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

Trend Micro Smart Protection Server Multiple Vulnerabilities 1. Advisory Information Title:: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities...