27 matches found
FreePBX-Vulns-December-25
Vulnerabilidades de FreePBX - Diciembre de 2025 Este repositorio contiene plantillas de Nuclei para detectar tres vulnerabilidades crΓticas en FreePBX: CVE-2025-61675 : InyecciΓ³n SQL autenticada CVSS 8.6 - Afecta al mΓ³dulo endpoint CVE-2025-61678 : Subida autenticada de archivos arbitrarios CVSS...
CVE-2025-57819-FreePBX-RCE2Root
CVE-2025-57819 β FreePBX SQLi β RCE β Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...
FreePBX-CVE-2025-57819
FreePBX CVE-2025-57819 β SQLi no autenticado a RCE como root Gravedad: CrΓtica Tipo: InyecciΓ³n SQL no autenticada β EjecuciΓ³n remota de cΓ³digo Software afectado: FreePBX mΓ³dulo endpoint Probado en: FreePBX en CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Resumen Existe una vulnerabilidad de inyecciΓ³...
CVE-2025-57819-ioc-check
CVE-2025-57819-ioc-check DescripciΓ³n CVE-2024-6387-ioc-check es una herramienta ligera y eficiente diseΓ±ada para identificar IoCs en servidores FreePBX con cualquiera de los mΓ³dulos endpoint Los usuarios deben actualizar a las ΓΊltimas versiones compatibles de FreePBX actualmente 15, 16 y 17 y...
FreePBX-Multiple-CVEs-2025
FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs π΄ CVE-2025-61675 A...
Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager
cve-2025-5781FreePBX In August 2025, a critical vulnerabilit...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 Exploit Metadata - Severity: Critical...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 β FreePBX SQLi β RCE β Root Full-chain PoC for...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX CVE-2025-57819 β Unauthenticated SQLi to Root RCE...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX 16 β Unauthenticated SQLi to RCE Proof-of-concept exp...
DEBIAN-CVE-2026-31595
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Stop cmdhandler work in epfntbepccleanup Disable the delayed work before clearing BAR mappings and doorbells to avoid running the handler after resources have been torn down. Unable to handle kernel...
Exploit for CVE-2025-61675
FreePBX-Multiple-CVEs-2025 This repository documents three se...
CVE-2025-67513
CVE-2025-67513 affects FreePBX Endpoint Manager (module for managing telephony endpoints in FreePBX). Versions prior to 16.0.96 and 17.0.1 through 17.0.9 use a weak default 6βdigit app_password, which can be brute-forced. Depending on local configuration, this password could grant access to the e...
FreePBX SQL Injection Vulnerability (CNVD-2025-3038208)
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. FreePBX suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered S...
CVE-2025-62173
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
CVE-2025-62173
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
FreePBX SQL注ε ₯ζΌζ΄
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. FreePBX suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered S...
EUVD-2025-201138
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
