CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Directory Listing Broken Access Control Overview issabel-pbx version 4.0.0-6 contains a Broken Access Control vulnerability that manifests as unauthenticated Directory Listing on the web interface. Any remote, unauthenticated attacker can browse the...

asterisk

The AsteriskR Open Source PBX By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document before you...

Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 Remote Code Execution Authenticated - CVE-2024-0986 Description/Summary Issabel PBX 4.0.0 allows a logged in user to use asteriskcli console to create files with xmldoc and dump commands. This allows to execute remote commands based on the name of the uploaded files abusing...

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF to Privilege Escalation Table of Contents Overview Vulnerability Details Affected Software CVSS Score Attack Scenario Proof of Concept PoC Steps to Reproduce Impact Remediation References Disclaimer Overview CVE-2023-34839 is a Cross-Site Request Forgery...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Stored Cross-Site Scripting XSS Overview Field| Details ---|--- CVE ID| CVE-2023-37191 Product| Issabel PBX issabel-pbx Affected Version| 4.0.0-6 Vulnerability Type| Stored Cross-Site Scripting XSS Severity| Medium Discovery Date| 7 July 2023 Discovered By|...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Stored Cross-Site Scripting XSS 📋 Overview Field| Details ---|--- CVE ID| CVE-2023-37190 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel-PBX Affected Version| 4.0.0-6 Severity| Medium CVSS v3.1 Score: 5.4 Discovered By| Sahil Ojha...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete User Group Disclaimer: This repository is intended for educational and authorized security research purposes only. Do not use this exploit against any system you do not own or have explicit written permission to test...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Stored Cross-Site Scripting XSS Overview Field| Details ---|--- CVE ID| CVE-2023-37189 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel PBX 4.0.0-6 Affected URL| index.php?menu=billingrates Vulnerable Fields| Name and Prefix fields in t...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF Overview CVE ID: CVE-2023-37598 Vulnerability Type: Cross-Site Request Forgery CSRF Affected Product: issabel-pbx v4.0.0-6 Severity: Medium Discovered by: Sahil Ojha Disclosure Date: 10/07/2023 Vendor Homepage:...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

Issabel Framework - Hard-Coded PBX API JWT Key

Issabel Framework before commit b97dbaf uses a shared HS256 key for PBX API bearer tokens. This template uses the read-only AMI ExtensionState action to check whether the PBX API accepts a short-lived token signed with either the vulnerable upstream-source key or the key in the 5.0.0-2 RPM, after...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

CVE-2026-75600

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...

asterisk v23.5.0-rc2

The AsteriskR Open Source PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document...

asterisk v23.5.0-rc1

The AsteriskR Open Source PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document...

SIP OPTIONS Detection

Sends a SIP OPTIONS request over TCP then UDP fallback to fingerprint PBX / VoIP endpoints on port 5060. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SIP services via OPTIONS probe TCP then UDP.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

Issabel PBX 4.0.0-6 - Directory Listing Detection

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory !/usr/bin/env python3 -- coding: utf-8 -- """An issue in issabel-pbx v.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

CVE-2026-46514

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fmresetpassword in Tools/ResetPassword.php:48-53 returned a plaintext password and fmaddextension in Tools/AddExtension.php:172 returned a plaintext secret; Frogman.class.php:2207-2211 used auditOutcome to JSON-encode...

EUVD-2026-45002

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERMREAD access was sufficient to call fmlistmanagers, fmlistpinsets, fmshowcontext, fmgetmcpconfig, fmbackupstatus, fmwhoscalling, fmrunsavedquery, and fmdiagnosetrunk, exposing AMI manager secrets, outbound dial PIN...