3806 matches found
CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-59051
The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input allows authenticated OS command...
CVE-2025-59429: Improper Neutralization of Input During Web Page Generation
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
FreePBX Endpoint Manager 操作系统命令注入漏洞
FreePBX Endpoint Manager is a centralized IP phone endpoint configuration module from the FreePBX open source. An operating system command injection vulnerability exists in FreePBX Endpoint Manager versions prior to 16.0.92 and prior to 17.0.6, which stems from insufficient user input cleanup, an...
PT-2025-42182
Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.68.39 FreePBX versions prior to 17.0.18.38 Description FreePBX, an open source GUI for managing Asterisk, contains a reflected cross-site scripting issue on the Asterisk HTTP Status page. The page is exposed by...
Debian: Security Advisory (DLA-4326-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 4326-1] asterisk security update
Debian LTS Advisory DLA-4326-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2025 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb11u8 CVE ID : CVE-2025-1131 CVE-2025-54995 Two security vulnerabilities have been discovered...
DLA-4326-1 asterisk - security update
Bulletin has no description...
Debian dla-4326 : asterisk - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4326 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4326-1 [email protected]...
EUVD-2017-18307
Malware in sbrugna...
EUVD-2007-2481
Malware in sbrugna...
EUVD-2007-6139
Malware in sbrugna...
EUVD-2012-1212
Malware in sbrugna...
EUVD-2011-2648
Malware in sbrugna...
EUVD-2013-6886
Malware in sbrugna...
EUVD-2013-2625
Malware in sbrugna...
EUVD-2018-4205
Malware in sbrugna...
EUVD-2021-18753
Malware in sbrugna...