CVE-2025-59056 FreePBX vulnerable to unauthenticated Denial of Service

FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the module's database tables, which is where mo...

PT-2025-37764

Name of the Vulnerable Software and Affected Versions: FreePBX versions 15.0.0 through 15.0.37 FreePBX versions 16.0.0 through 16.0.40 FreePBX versions 17.0.0 through 17.0.20 Description: FreePBX is a web-based graphical user interface. Malicious connections to the Administrator Control Panel web...

FreePBX 路径遍历漏洞

FreePBX formerly known as Asterisk Management Portal is a suite of tools from the FreePBX project for configuring Asterisk an IP telephony system via a GUI web-based graphical interface. A path traversal vulnerability exists in FreePBX versions 15, 16, and 17, which stems from a malicious...

CVE-2025-0087

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in pino-style-loader-uninstall-hyperion (npm)

The package pino-style-loader-uninstall-hyperion was found to contain malicious code...

Malicious code in link-radiometric-umbriel-uninstall (npm)

The package link-radiometric-umbriel-uninstall was found to contain malicious code...

Malicious code in resolvers-umbra-chai-uninstall (npm)

The package resolvers-umbra-chai-uninstall was found to contain malicious code...

Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

Malicious code in uninstall-enceladus-luna-testcafe (npm)

The package uninstall-enceladus-luna-testcafe was found to contain malicious code...

MAL-2025-46459 Malicious code in uninstall-enceladus-luna-testcafe (npm)

The package uninstall-enceladus-luna-testcafe was found to contain malicious code...

MAL-2025-43763 Malicious code in changelog-uninstall-sirius-jupiter (npm)

The package changelog-uninstall-sirius-jupiter was found to contain malicious code...

Malicious code in nuxtjs-uninstall-sedimentology-crust (npm)

The package nuxtjs-uninstall-sedimentology-crust was found to contain malicious code...

Malicious code in changelog-uninstall-sirius-jupiter (npm)

The package changelog-uninstall-sirius-jupiter was found to contain malicious code...

MAL-2025-45562 Malicious code in pino-style-loader-uninstall-hyperion (npm)

The package pino-style-loader-uninstall-hyperion was found to contain malicious code...

MAL-2025-45032 Malicious code in link-radiometric-umbriel-uninstall (npm)

The package link-radiometric-umbriel-uninstall was found to contain malicious code...

MAL-2025-43922 Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

MAL-2025-45818 Malicious code in resolvers-umbra-chai-uninstall (npm)

The package resolvers-umbra-chai-uninstall was found to contain malicious code...

MAL-2025-45395 Malicious code in nuxtjs-uninstall-sedimentology-crust (npm)

The package nuxtjs-uninstall-sedimentology-crust was found to contain malicious code...

CVE-2025-0087

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0087

CVE-2025-0087 describes a local elevation-of-privilege in Android: in UninstallerActivity.java onCreate, missing permission checks could allow uninstalling another user’s app without user interaction. Several sources (NVD, CNVD/CNNVD, OSV) confirm the issue and classify it as EoP with a CVSSv3.1 ...