CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF to Privilege Escalation Table of Contents Overview Vulnerability Details Affected Software CVSS Score Attack Scenario Proof of Concept PoC Steps to Reproduce Impact Remediation References Disclaimer Overview CVE-2023-34839 is a Cross-Site Request Forgery...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 リモートコード実行（認証済み）- CVE-2024-0986 説明/概要 Issabel PBX 4.0.0 では、ログインユーザーが asteriskcli コンソールを使用して、xmldoc および dump コマンドでファイルを作成できます。 これにより、アップロードされたファイル名を悪用して restore.php ファイルを介してリモートコマンドを実行することが可能になります。 この PoC スクリプトは、こちらの PoC 動画 に基づいています。 使用方法 root@kitploit: $ python3...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF Overview CVE ID: CVE-2023-37598 Vulnerability Type: Cross-Site Request Forgery CSRF Affected Product: issabel-pbx v4.0.0-6 Severity: Medium Discovered by: Sahil Ojha Disclosure Date: 10/07/2023 Vendor Homepage:...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Stored Cross-Site Scripting XSS Overview...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Stored Cross-Site Scripting XSS Overview...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete User Group Disclaimer: This repository is intended for educational and authorized security research purposes only. Do not use this exploit against any system you do not own or have explicit written permission to test...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Stored Cross-Site Scripting XSS 📋 Overview...

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Directory Listing Broken Access Control Overview issabel-pbx version 4.0.0-6 contains a Broken Access Control vulnerability that manifests as unauthenticated Directory Listing on the web interface. Any remote, unauthenticated attacker can browse the...

EUVD-2021-20852

Malware in sbrugna...

EUVD-2023-41110

Malicious code in bioql PyPI...

EUVD-2023-41481

Malicious code in bioql PyPI...

EUVD-2023-41480

Malicious code in bioql PyPI...

EUVD-2021-33234

Malicious code in bioql PyPI...

EUVD-2023-41111

Malicious code in bioql PyPI...

EUVD-2023-41482

Malicious code in bioql PyPI...

EUVD-2023-41109

Malicious code in bioql PyPI...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...