Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 Remote Code Execution Authentifiziert - CVE-2024-0986 Beschreibung/Zusammenfassung Issabel PBX 4.0.0 erlaubt einem eingeloggten Benutzer, die asteriskcli-Konsole zu verwenden, um Dateien mit den Befehlen xmldoc und dump zu erstellen. Dies ermöglicht die Ausführung von...

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6：CSRF 导致权限提升 目录 概述 漏洞详情 受影响软件 CVSS 评分 攻击场景 概念验证 PoC 复现步骤 影响 修复建议 参考资料 免责声明 概述 CVE-2023-34839 是在 Issabel PBX 4.0.0-6 版本中发现的一个 跨站请求伪造 CSRF 漏洞。Issabel PBX 是一款广泛使用的开源统一通信平台。该漏洞存在于用户管理端点中，允许未经身份验证的远程攻击者通过诱使已认证的管理员访问特制网页，静默地创建一个新的管理员账户。 字段| 值 ---|--- CVE ID|...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF — किसी भी उपयोगकर्ता को हटाएं गंभीरता: उच्च | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 विषय सूची अवलोकन भेद्यता विवरण प्रभाव प्रभावित संस्करण हमला परिदृश्य प्रमाण अवधारणा पुनरुत्पादन के चरण शमन / उपचा...

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Verzeichnisauflistung Broken Access Control Übersicht issabel-pbx Version 4.0.0-6 enthält eine Schwachstelle durch fehlerhafte Zugriffskontrolle Broken Access Control, die sich als Verzeichnisauflistung Directory Listing ohne Authentifizierung in der...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Site-übergreifende Anfragefälschung CSRF Übersicht CVE-ID: CVE-2023-37598 Schwachstellentyp: Site-übergreifende Anfragefälschung CSRF Betroffenes Produkt: issabel-pbx v4.0.0-6 Schweregrad: Mittel Entdeckt von: Sahil Ojha Offenlegungsdatum: 10.07.2023...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS 📋 अवलोकन...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Falsificação de Solicitação entre Sites CSRF — Exclusão de Grupo de Usuários Aviso legal: Este repositório destina-se exclusivamente a fins educacionais e de pesquisa de segurança autorizada. Não utilize este exploit contra qualquer sistema que você não possu...

EUVD-2021-20852

Malware in sbrugna...

EUVD-2023-41110

Malicious code in bioql PyPI...

EUVD-2023-41480

Malicious code in bioql PyPI...

EUVD-2023-41481

Malicious code in bioql PyPI...

EUVD-2023-41109

Malicious code in bioql PyPI...

EUVD-2023-41111

Malicious code in bioql PyPI...

EUVD-2023-41482

Malicious code in bioql PyPI...

EUVD-2021-33234

Malicious code in bioql PyPI...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...