482 matches found
Mitel MiCollab <= 9.8.0.33 - SQL Injection
A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...
Mitel MiCollab - Information Disclosure & Denial of Service
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...
Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...
CVE-2024-41713-PoC-exploit
CVE-2024-41713-PoC-exploit Mitel MiCollab 認証バイパスから任意のファイル読み取り root@kitploit: ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody root@kitploit: ❯ cat debugresponse.txt...
PoC-CVE-2025-52913
CVE-2025-52913 - MiCollab パス正規化の脆弱性 📌 概要 このリポジトリには、Mitel MiCollab に影響を与えるパス正規化の脆弱性 CVE-2025-52913 の概念実証（PoC）が含まれています。 この問題により、認証されていない攻撃者が ..; などの細工された URL シーケンスを利用して意図されたパス制限を回避し、内部アプリケーションエンドポイントへのアクセスを可能にします。 ⚠️ 影響 悪用に成功すると、以下が可能になる可能性があります： 内部および制限されたエンドポイントへのアクセス 機密性の高いアプリケーションコンポーネントの露出...
CVE-2024-41713POC
CVE-2024-41713POC Mitel MiCollab エンタープライズコラボレーションプラットフォームの任意ファイル読み取り脆弱性CVE-2024-41713。Mitel MiCollabソフトウェアの NuPoint ユニファイドメッセージング NPM コンポーネントに認証バイパス脆弱性が存在し、入力検証が不十分であるため、認証されていないリモート攻撃者がこの脆弱性を悪用してパストラバーサル攻撃を実行する可能性があります。悪用に成功すると、ユーザーデータやシステム設定への不正アクセス、破壊、削除につながる可能性があります。影響範囲：version MiCollab 9.8...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab 認証バイパスから任意ファイル読み取り 技術的な詳細については、ブログ記事を参照してください root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab Authentication Bypass and Arbitrary...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2023-25597
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to...
CVE-2018-18819
A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 7.3.0.601 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP2 8.0.2.202, and MiVoice Business Express versions 7.3 PR3 7.3.1.302 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP1 8.0.2.202, could allow creation of...
CVE-2022-26143
The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...
CVE-2024-41714
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 9.8.1.5 and MiVoice Business Solution Virtual Instance MiVB SVI through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful...
CVE-2019-12165
MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...
EUVD-2020-6074
Malware in sbrugna...
EUVD-2020-5984
Malware in sbrugna...
EUVD-2019-8992
Malware in sbrugna...
EUVD-2020-18290
Malware in sbrugna...
EUVD-2020-19853
Malware in sbrugna...