CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF zu Privilegieneskalation Inhaltsverzeichnis Übersicht Details zur Schwachstelle Betroffene Software CVSS-Score Angriffsszenario Proof of Concept PoC Schritte zum Reproduzieren Auswirkungen Behebung Referenzen Haftungsausschluss Übersicht CVE-2023-34839 i...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Eliminazione di qualsiasi utente Severità: Alta | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Indice dei contenuti Panoramica Dettagli della vulnerabilità Impatto Versione vulnerabile Scenario di attacco...

Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 Esecuzione di codice remoto autenticato - CVE-2024-0986 Descrizione/Riepilogo Issabel PBX 4.0.0 consente a un utente autenticato di utilizzare la console asteriskcli per creare file con i comandi xmldoc e dump. Ciò consente di eseguire comandi remoti basati sul nome dei file...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Verzeichnisauflistung Broken Access Control Übersicht issabel-pbx Version 4.0.0-6 enthält eine Schwachstelle durch fehlerhafte Zugriffskontrolle Broken Access Control, die sich als Verzeichnisauflistung Directory Listing ohne Authentifizierung in der...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Site-übergreifende Anfragefälschung CSRF Übersicht CVE-ID: CVE-2023-37598 Schwachstellentyp: Site-übergreifende Anfragefälschung CSRF Betroffenes Produkt: issabel-pbx v4.0.0-6 Schweregrad: Mittel Entdeckt von: Sahil Ojha Offenlegungsdatum: 10.07.2023...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS 📋 अवलोकन...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Falsificação de Solicitação entre Sites CSRF — Exclusão de Grupo de Usuários Aviso legal: Este repositório destina-se exclusivamente a fins educacionais e de pesquisa de segurança autorizada. Não utilize este exploit contra qualquer sistema que você não possu...

EUVD-2021-20852

Malware in sbrugna...

EUVD-2023-41110

Malicious code in bioql PyPI...

EUVD-2023-41480

Malicious code in bioql PyPI...

EUVD-2023-41481

Malicious code in bioql PyPI...

EUVD-2023-41109

Malicious code in bioql PyPI...

EUVD-2023-41111

Malicious code in bioql PyPI...

EUVD-2023-41482

Malicious code in bioql PyPI...

EUVD-2021-33234

Malicious code in bioql PyPI...

CVE-2024-0986

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...