107 matches found
FreePBX-Multiple-CVEs-2025
FreePBX-Multiple-CVEs-2025 Ce dépôt documente trois vulnérabilités de sécurité découvertes dans FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, incluant l'analyse, l'impact et les détails de preuve de concept à des fins de recherche en sécurité et de sensibilisation. Description des CVE 🔴...
CVE-2025-64328_FreePBX-framework-Command-Injection
CVE-2025-64328 – Injection de commande authentifiée dans le module framework de FreePBX Référentiel simple de preuve de concept pour CVE-2025-64328, l'injection de commande authentifiée dans le module framework de FreePBX. Analyse complète ici :...
FreePBX-Vulns-December-25
Уязвимости FreePBX - декабрь 2025 Этот репозиторий содержит шаблоны Nuclei для обнаружения трёх критических уязвимостей в FreePBX: CVE-2025-61675 : Аутентифицированная SQL-инъекция CVSS 8.6 - затрагивает модуль endpoint CVE-2025-61678 : Аутентифицированная произвольная загрузка файлов CVSS 8.6 -...
CVE-2026-73661 FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in ampconf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...
CVE-2026-73661
CVE-2026-73661 affects FreePBX by allowing an authenticated user with backup-restore or backup file write access to craft a backup that restores the hidden AUTHTYPE setting to none via runRestore() in amp_conf/htdocs/admin/libraries/Builtin/Restore.php. This enables bypassing the user‑interface r...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13984)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13987)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...
Huawei HarmonyOS Card Framework Module Multi-threaded Contest Condition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded race condition vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause availabili...
Huawei HarmonyOS Video Framework Module Multi-threaded Conditional Competition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Video Framework module, which can be exploited by an attacker to cause...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68956
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68957
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68955
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68962
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68958
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-68960
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...