Lucene search
+L

823 matches found

Kitploit
Kitploit
added 2026/09/18 1:17 p.m.11 views

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Summary: This guide demonstrates how to chain two vulnerabilities in FreePBX 16 CVE-2025-57819 and CVE-2025-61678 to achieve a complete attack chain from unauthenticated access to Remote Code Execution RCE. Vulnerability / CVE Information , to write a PHP...

10CVSS8.6AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/18 7:10 a.m.7 views

cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ A powerful Nuclei toolkit for detecting and validating the critical FreePBX authentication bypass vulnerability. 📖 Table of Contents Click to expand About This Project Key Features Vulnerability Breakdown Templates in Action Finding Targets with Shodan Legal...

10CVSS8.6AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/18 5:59 a.m.9 views

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

10CVSS9.1AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/18 12:02 a.m.6 views

CVE-2025-57819-ioc-check

CVE-2025-57819-ioc-check Description CVE-2024-6387-ioc-check is a lightweight, efficient tool designed to identify IoCs on freepbx servers with any of endpoint Users should upgrade to the latest supported versions of FreePBX currently 15, 16, and 17 and confirm that the installed "endpoint" modul...

10CVSS7.5AI score0.99506EPSS
SaveExploits100References1
Kitploit
Kitploit
added 2026/09/17 12:32 p.m.6 views

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs 🔴 CVE-2025-61675 A...

9.8CVSS8.5AI score0.43683EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/17 12:10 p.m.12 views

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters. 🛡️ Uses error-based , boolean-based , and time-based techniques to flag potential injection without modifying the database. ✍️ Per-parameter verdicts + clean...

10CVSS8.6AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/17 9:39 a.m.3 views

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start root@kitploit: git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

10CVSS0.85463EPSS
SaveExploits30
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.76 views

FreePBX - Remote Code Execution

FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...

10CVSS8.8AI score0.85463EPSS
SaveExploits30References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.37 views

FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection

FreePBX Endpoint Manager 17.0.2.36 to = 17.0.2.36 && 17.0.3 - Authenticated Command Injection author: th3y severity: critical description: | FreePBX Endpoint Manager 17.0.2.36 to 17.0.3 contains a command injection caused by improper sanitization in filestore module's testconnection checksshconne...

8.6CVSS7.5AI score0.84618EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/16 12:36 p.m.6 views

FreePBX-Reverse-Shell-Module

FreePBX-Reverse-Shell-Module...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:17 p.m.5 views

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...

10CVSS9.2AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/15 12:49 p.m.10 views

CVE-2026-46376

CVE-2026-46376 — FreePBX Unauthenticated UCP Access via Hard-Coded Credentials A critical vulnerability in FreePBX's User Management userman module allows unauthenticated attackers to access the User Control Panel UCP using hard-coded credentials that are embedded during the UCP generic template...

9.8CVSS6AI score0.00425EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/15 5:04 a.m.8 views

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Unauthenticated Summary FreePBX versions 15, 16, and 17 contain a Remote Code Execution RCE vulnerability caused by insufficient sanitization of user-supplied data in endpoints. An unauthenticated attacker can manipulate the database and achieve remote code execution. Exploit...

10CVSS8.9AI score0.85463EPSS
SaveExploits30References1
Kitploit
Kitploit
added 2026/09/14 11:49 p.m.10 views

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execution on FreePBX 16...

10CVSS8.6AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/14 11:14 p.m.9 views

CVE-2025-57819

CVE-2025-57819 - Ejecución remota de código no autenticada RCE en FreePBX CVE-2025-57819 es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a Sangoma FreePBX en las versiones 15, 16 y 17. La vulnerabilidad se debe a una sanitización insuficiente de las entradas controladas...

10CVSS8.8AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/14 6:52 p.m.8 views

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module 15.0.66, 16.0.89 and 17.0.3 Tested On: FreePBX 16.0.40.7 on CentOS 7 with Apache 2.4...

10CVSS8.7AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/14 2:14 p.m.6 views

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

9.8CVSS8.5AI score0.43683EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/14 1:45 p.m.7 views

watchTowr-vs-FreePBX-CVE-2025-57819

CVE-2025-57819 FreePBX Pre-Auth RCE FreePBX Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to upload the php script or adds a new user if the upload fails. root@kitploit: $ python3 watchTowr-vs-FreePBX-CVE-2025-57819.py -H...

10CVSS8.7AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/14 10:45 a.m.10 views

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...

10CVSS8.8AI score0.85463EPSS
SaveExploits30References2
Kitploit
Kitploit
added 2026/09/14 7:42 a.m.10 views

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – FreePBX 未认证 SQL注入到远程代码执行 PoC 本仓库包含两个针对 CVE-2025-57819 的 Python 概念验证 PoC 脚本,这是 FreePBX 中的一个关键 未认证 SQL注入漏洞 。 🧠 关于漏洞 CVE-2025-57819 CVE-2025-57819 影响多个版本的 FreePBX,允许 未认证的远程攻击者 通过 admin/ajax.php 中的漏洞参数执行 任意SQL查询 。 该漏洞源于 module=FreePBX\modules\endpoint\ajax 端点中 不充分的输入清理 ,导致后端查询中可直接进...

10CVSS8.8AI score0.85463EPSS
SaveExploits30References2
Rows per page
Query Builder