CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: SIP-Telefon der Mitel-6900w-Serie - Vorübergehende Umgehung der Authentifizierung Details zur Schwachstelle Zusammenfassung Es handelt sich um eine Schwachstelle zur vorübergehenden Umgehung der Authentifizierung im HTTP-Verwaltungs-Webpanel mehrerer...

Mitel MiCollab - Information Disclosure & Denial of Service

Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...

Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

Mitel MiCollab <= 9.8.0.33 - SQL Injection

A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

CVE-2021-26714

CVE-2021-26714 Vulnerabilità di Directory Traversal nel portale Enterprise License Manager in Mitel MiContact Center Enterprise precedente alla versione 9.4. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle...

PoC-CVE-2025-52913

CVE-2025-52913 - MiCollab Pfadnormalisierungsschwachstelle 📌 Übersicht Dieses Repository enthält einen Proof of Concept PoC für CVE-2025-52913 , eine Pfadnormalisierungsschwachstelle, die Mitel MiCollab betrifft. Das Problem ermöglicht es nicht authentifizierten Angreifern, beabsichtigte...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform – Schwachstelle zum Lesen beliebiger Dateien CVE-2024-41713. Da in der NuPoint Unified Messaging NPM Komponente der Mitel MiCollab Software eine Schwachstelle zur Umgehung der Authentifizierung und unzureichende Eingabevalidierung...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Bypass dell'Autenticazione per Lettura Arbitraria di File Vedi il nostro post sul blog per i dettagli tecnici root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

CVE-2025-52914

CVE-2025-52914 Wie funktioniert diese Erkennungsmethode? Versionen werden von Zielhosts extrahiert, insbesondere die SVRVER HTML-Antwort im Body, und dann mit Versionen vor 9.3.1 und Versionen von 10.0.26 bis 10.1.101 einschließlich abgeglichen. Wie führe ich dieses Skript aus? 1. Laden Sie Nucle...

CVE-2024-41713-PoC-exploit

CVE-2024-41713-PoC-exploit Mitel MiCollab Authentifizierungsumgehung zum Lesen beliebiger Dateien root@kitploit: ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody root@kitploit:...

Mitel 6800 / 6900 / 6900w Series SIP Phone Argument Injection Vulnerability (CVE-2024-41710)

According to its self-reported version, the remote Mitel IP Phone running SIP Software is affected by an argument injection vulnerability: - A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, through R6.4.0.HF1 R6.4.0.136 could allow an authenticated attacker with...

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

MAL-2026-1793 Malicious code in mitel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b245c6094f27ca33a5e473960bae859b490202b55590d7a60317d5b5f1b4330 The package mitel was found to contain malicious code...

Malicious code in mitel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b245c6094f27ca33a5e473960bae859b490202b55590d7a60317d5b5f1b4330 The package mitel was found to contain malicious code...

CVE-2025-67822

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 7.3.0.0.50 through 7.8 SP1 7.8.1.0.14 could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gai...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...