CVE-2025-57819

CVE-2025-57819 - FreePBX 16 Endpoint Manager inyección SQL no autenticada a RCE Inyección SQL apilada no autenticada en el módulo Endpoint Manager de FreePBX admin/ajax.php, parámetro brand, CVE-2025-57819, que afecta al framework FreePBX --vhost --root --cmd Cómo funciona 1. Confirmar la inyecci...

CVE-2026-82526

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

EUVD-2026-70653

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...