27 matches found
FreePBX-Vulns-December-25
FreePBX कमजोरियाँ - दिसंबर 2025 इस रिपॉजिटरी में FreePBX में तीन गंभीर कमजोरियों का पता लगाने के लिए Nuclei टेम्पलेट शामिल हैं: CVE-2025-61675 : प्रमाणीकृत SQL इंजेक्शन CVSS 8.6 - एंडपॉइंट मॉड्यूल को प्रभावित करता है CVE-2025-61678 : प्रमाणीकृत मनमाना फ़ाइल अपलोड CVSS 8.6 - एंडपॉइंट मॉड्यूल को...
CVE-2025-57819-FreePBX-RCE2Root
CVE-2025-57819 — FreePBX SQLi → RCE → रूट CVE-2025-57819 के लिए पूर्ण-श्रृंखला PoC। FreePBX के एंडपॉइंट मॉड्यूल में अप्रमाणित त्रुटि-आधारित SQL इंजेक्शन, क्रॉन जॉब इंजेक्शन और इनक्रोन विशेषाधिकार वृद्धि के माध्यम से रूट शेल में बदल जाता है। केवल अधिकृत परीक्षण और अनुसंधान के लिए। उन सिस्टमों के...
FreePBX-CVE-2025-57819
FreePBX CVE-2025-57819 — Nicht authentifizierte SQLi zu Root-RCE Schweregrad: Critical Typ: Nicht authentifizierte SQL Injection → Remote-Codeausführung Betroffene Software: FreePBX endpoint-Modul Getestet auf: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Übersicht In der...
FreePBX-Multiple-CVEs-2025
FreePBX-Multiple-CVEs-2025 Questo repository documenta tre vulnerabilità di sicurezza scoperte in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, inclusi analisi, impatto e dettagli di proof-of-concept per scopi di ricerca e sensibilizzazione sulla sicurezza. Descrizione CVEs 🔴...
CVE-2025-57819-ioc-check
CVE-2025-57819-ioc-check Descrição O CVE-2024-6387-ioc-check é uma ferramenta leve e eficiente projetada para identificar IoCs em servidores FreePBX com qualquer um dos módulos endpoint Os usuários devem atualizar para as versões suportadas mais recentes do FreePBX atualmente 15, 16 e 17 e...
Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager
cve-2025-5781FreePBX In August 2025, a critical vulnerabilit...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 Exploit Metadata - Severity: Critical...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exp...
DEBIAN-CVE-2026-31595
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Stop cmdhandler work in epfntbepccleanup Disable the delayed work before clearing BAR mappings and doorbells to avoid running the handler after resources have been torn down. Unable to handle kernel...
Exploit for CVE-2025-61675
FreePBX-Multiple-CVEs-2025 This repository documents three se...
CVE-2025-67513
CVE-2025-67513 affects FreePBX Endpoint Manager (module for managing telephony endpoints in FreePBX). Versions prior to 16.0.96 and 17.0.1 through 17.0.9 use a weak default 6‑digit app_password, which can be brute-forced. Depending on local configuration, this password could grant access to the e...
FreePBX SQL Injection Vulnerability (CNVD-2025-3038208)
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. FreePBX suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered S...
CVE-2025-62173
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
CVE-2025-62173
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
FreePBX SQL注入漏洞
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. FreePBX suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered S...
EUVD-2025-201138
Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API...
