450 matches found
CVE-2024-41713POC
CVE-2024-41713POC ميتل ميكولاب منصة التعاون المؤسسي ثغرة قراءة الملفات التعسفية CVE-2024-41713: نظرًا لوجود ثغرة في تجاوز المصادقة في مكون NuPoint للرسائل الموحدة NPM في برنامج ميتل ميكولاب، وعدم كفاية التحقق من المدخلات، يمكن لمهاجم عن بعد غير مصادق استغلال الثغرة لتنفيذ هجوم اجتياز المسار، مما ...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab Contournement d'authentification vers lecture arbitraire de fichier Voir notre article de blog pour les détails techniques / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...
Mitel MiCollab <= 9.8.0.33 - SQL Injection
A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...
Mitel MiCollab - Information Disclosure & Denial of Service
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...
CVE-2024-41713-PoC-exploit
CVE-2024-41713-PoC-exploit تجاوز المصادقة في Mitel MiCollab لقراءة الملفات بشكل تعسفي ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody ❯ cat debugresponse.txt...
PoC-CVE-2025-52913
CVE-2025-52913 - Vulnérabilité de normalisation de chemin MiCollab 📌 Aperçu Ce dépôt contient une preuve de concept PoC pour CVE-2025-52913 , une vulnérabilité de normalisation de chemin affectant Mitel MiCollab. Le problème permet à des attaquants non authentifiés de contourner les restrictions ...
Exploit for CVE-2025-42558
Patch: CVE-2025-42558 Vulnerability Details - CVE: CVE...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2023-25597
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to...
CVE-2022-26143
The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...
CVE-2024-41714
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 9.8.1.5 and MiVoice Business Solution Virtual Instance MiVB SVI through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful...
The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform allows a hacker to execute arbitrary SQL commands.
The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
EUVD-2019-8991
Malware in sbrugna...
EUVD-2020-18291
Malware in sbrugna...
EUVD-2020-5984
Malware in sbrugna...
EUVD-2021-18932
Malware in sbrugna...
EUVD-2021-14157
Malware in sbrugna...
EUVD-2021-14156
Malware in sbrugna...