107 matches found
FreePBX-Multiple-CVEs-2025
FreePBX-多CVE-2025 此仓库记录了在FreePBX中发现的三个安全漏洞（CVE-2025-66039、CVE-2025-61678、CVE-2025-61675），包括分析、影响及概念验证详情，用于安全研究和意识提升。 CVE 描述 🔴 CVE-2025-61675 FreePBX中的一个安全缺陷，源于对用户控制输入的不当处理。此问题可能允许攻击者影响应用程序功能，并可能威胁整体系统安全。 🔴 CVE-2025-61678 FreePBX存在一个输入验证漏洞，可能允许攻击者操纵应用程序行为。成功利用此漏洞可能根据所使用的攻击向量影响机密性和完整性。 🔴...
CVE-2025-64328_FreePBX-framework-Command-Injection
CVE-2025-64328 FreePBX framework 模块中的认证命令注入 此仓库为 CVE-2025-64328 FreePBX framework 模块中认证命令注入的简单概念验证。 完整文章在此：https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl 概念验证 root@kitploit: $ curl -s \ -XPOST --cookie-jar /tmp/freepbx-cookie --data 'username=lowprivuser&password...
FreePBX-Vulns-December-25
Vulnerabilidades de FreePBX - Diciembre de 2025 Este repositorio contiene plantillas de Nuclei para detectar tres vulnerabilidades críticas en FreePBX: CVE-2025-61675 : Inyección SQL autenticada CVSS 8.6 - Afecta al módulo endpoint CVE-2025-61678 : Subida autenticada de archivos arbitrarios CVSS...
CVE-2026-73661 FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in ampconf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...
CVE-2026-73661
CVE-2026-73661 affects FreePBX by allowing an authenticated user with backup-restore or backup file write access to craft a backup that restores the hidden AUTHTYPE setting to none via runRestore() in amp_conf/htdocs/admin/libraries/Builtin/Restore.php. This enables bypassing the user‑interface r...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13984)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13987)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Contest Condition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded race condition vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause availabili...
Huawei HarmonyOS Video Framework Module Multi-threaded Conditional Competition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Video Framework module, which can be exploited by an attacker to cause...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68956
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68957
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68955
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...