freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...

PhishingKitHunter

PhishingKitHunter Find phishing kits which use your brand/organization's files and image. PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campains targeting your customers and using some of your own website files as CSS, JS, .... This tool - write ...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE Severity: Critical Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module Tested On: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Overview An unauthenticated SQL injection...

opensquat

Núcleo de openSquat 📑 Tabla de Contenidos ¿Qué es openSquat? Destacado en Modelo Open-Core Características Clave Inicio Rápido Requisitos Uso Modos Premium y API Configuración Automatización Referencia de CLI Contribuciones Autor Licencia 🎯 ¿Qué es openSquat? openSquat es una herramienta de...

dnstwist

Descubre en qué tipo de problemas pueden meterse los usuarios al intentar escribir tu nombre de dominio. Encuentra dominios similares que los adversarios pueden usar para atacarte. Puede detectar typosquatters, ataques de phishing, fraude y suplantación de marca. Útil como fuente adicional de...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

Malicious Package

Overview @brick-v2/brand is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @brick-v2/brand (npm)

Source: amazon-inspector a194395a620ef40055a22d7beccbab1e1ca0c662afe83b9ee2fb23d07ebaedc5 package.json declares a preinstall hook node index.js || true that loads a prebuilt native addon at prebuilds/-/metrics.node. The addon reads credential-grade environment variables AWSSECRETACCESSKEY and oth...

MAL-2026-17714 Malicious code in @brick-v2/brand (npm)

@brick-v2/brand is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

Malicious code in @brick-v2/brand (npm)

@brick-v2/brand is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

CamTRON

CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...

Malicious code in hardhat-devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcb676af47bf26017d1fbc2cf63aae76d09e9248e860f6d0e86d57da92d2b95 Package published as hardhat-devkit presents itself as an Ethereum/Hardhat developer toolkit, but the shipped surface is a cover story: README,...

@adatechnology/conversation-module (>=0.2.0, <=0.4.3), @adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35) +306 more potentially affected by CVE-2026-90771 via joi (>=18.0.0, <=18.2.8)

joi NPM version =18.0.0, =0.2.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =3.19.0 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-90771 Source advisory: SNYK:JS-JOI-19778379...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX 16 Endpoint Manager unauthenticated S...

FreePBX - Unauth SQLi Detection (CVE-2025-57819)

Detects CVE-2025-57819 via error-based SQL injection on /admin/ajax.php brand parameter, Endpoint Manager module. Confirms MySQL XPATH error leaking freepbxuser. Full RCE requires stacked-query cronjobs injection. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX Endpoint Manager unauth SQLi...

puncia v0.36

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

CVE-2026-82647

WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypassing origin checks and captcha validation. Attackers can craft a malicious web page that, when visited by an...

CVE-2026-32257

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a backend user with the backend.managebranding permission is compiled by the LESS parser and rendered without sanitizatio...

CVE-2026-32257

Winter CMS is an open-source content management system based on the Laravel PHP framework. Prior to 1.2.13 , custom CSS supplied through the Brand Settings Styles field by a user with the backend.manage_branding permission was compiled by the LESS CSS parser and rendered without sanitization on e...

CVE-2026-32257

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a backend user with the backend.managebranding permission is compiled by the LESS parser and rendered without sanitizatio...