127 matches found
FreePBX-Vulns-December-25
FreePBX 취약점 - 2025년 12월 이 저장소는 FreePBX의 세 가지 중요 취약점을 탐지하기 위한 Nuclei 템플릿을 포함합니다: CVE-2025-61675 : 인증된 SQL 인젝션 CVSS 8.6 - endpoint 모듈에 영향 CVE-2025-61678 : 인증된 임의 파일 업로드 CVSS 8.6 - endpoint 모듈에 영향 CVE-2025-66039 : 인증 우회 CVSS 9.3 - framework 모듈에 영향 영향을 받는 버전 CVE-2025-61675 및 CVE-2025-61678 endpoint 모...
CVE-2025-64328_FreePBX-framework-Command-Injection
CVE-2025-64328 FreePBX framework 모듈의 인증된 명령 주입 CVE-2025-64328 FreePBX framework 모듈의 인증된 명령 주입에 대한 간단한 개념 증명PoC 저장소입니다. 전체 분석 글: https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl 개념 증명 $ curl -s \ -XPOST --cookie-jar /tmp/freepbx-cookie --data...
FreePBX-Multiple-CVEs-2025
FreePBX-Multiple-CVEs-2025 이 저장소는 FreePBX에서 발견된 세 가지 보안 취약점CVE-2025-66039, CVE-2025-61678, CVE-2025-61675을 문서화하며, 보안 연구 및 인식 제고를 위한 분석, 영향, 개념 증명PoC 세부 정보를 포함합니다. CVE 설명 🔴 CVE-2025-61675 사용자가 제어하는 입력을 부적절하게 처리하여 발생하는 FreePBX의 보안 결함입니다. 이 문제로 인해 공격자가 애플리케이션 기능에 영향을 미치고 잠재적으로 전체 시스템 보안에 피해를 줄 수 있습니...
CVE-2026-73661 FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in ampconf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...
CVE-2026-73661
CVE-2026-73661 affects FreePBX by allowing an authenticated user with backup-restore or backup file write access to craft a backup that restores the hidden AUTHTYPE setting to none via runRestore() in amp_conf/htdocs/admin/libraries/Builtin/Restore.php. This enables bypassing the user‑interface r...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13987)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13984)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Contest Condition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded race condition vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause availabili...
Huawei HarmonyOS Video Framework Module Multi-threaded Conditional Competition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Video Framework module, which can be exploited by an attacker to cause...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68956
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68957
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68955
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...