371 matches found
PoC-CVE-2025-52913
CVE-2025-52913 - MiCollab パス正規化の脆弱性 📌 概要 このリポジトリには、Mitel MiCollab に影響を与えるパス正規化の脆弱性 CVE-2025-52913 の概念実証（PoC）が含まれています。 この問題により、認証されていない攻撃者が ..; などの細工された URL シーケンスを利用して意図されたパス制限を回避し、内部アプリケーションエンドポイントへのアクセスを可能にします。 ⚠️ 影響 悪用に成功すると、以下が可能になる可能性があります： 内部および制限されたエンドポイントへのアクセス 機密性の高いアプリケーションコンポーネントの露出...
CVE-2024-41713-PoC-exploit
CVE-2024-41713-PoC-exploit Mitel MiCollab 認証バイパスから任意のファイル読み取り root@kitploit: ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody root@kitploit: ❯ cat debugresponse.txt...
CVE-2024-41713POC
CVE-2024-41713POC Mitel MiCollab 企业协作平台 任意文件读取漏洞CVE-2024-41713由于Mitel MiCollab软件的 NuPoint 统一消息 NPM 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围：version MiCollab 9.8 SP2 9.8.2.12...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab 认证绕过导致任意文件读取 查看我们的博客文章了解技术细节 root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab Authentication Bypass and Arbitrary File Read exploit by...
Mitel MiCollab - Information Disclosure & Denial of Service
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...
Mitel MiCollab <= 9.8.0.33 - SQL Injection
A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2023-25597
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to...
CVE-2022-26143
The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...
CVE-2024-41714
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 9.8.1.5 and MiVoice Business Solution Virtual Instance MiVB SVI through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful...
EUVD-2020-18290
Malware in sbrugna...
EUVD-2020-6074
Malware in sbrugna...
EUVD-2019-9222
Malware in sbrugna...
EUVD-2019-8992
Malware in sbrugna...
EUVD-2020-5984
Malware in sbrugna...
EUVD-2020-19853
Malware in sbrugna...
EUVD-2021-18929
Malware in sbrugna...
EUVD-2020-23214
Malware in sbrugna...