25 matches found
Sql injection
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page...
CVE-2018-15892
FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page...
DEBIAN-CVE-2017-7652
In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...
EasyMail MessagePrinter Object - emprint.dll 6.0.1.0 Remote Buffer Overflow
EasyMail MessagePrinter Object - emprint.dll 6.0.1.0 Remote Buffer Overflow pwnin'... //add su one, user: sun pass: tzu shellcode =...
grandstream-sip.txt
While playing with the SIP Madynes stateful fuzzer for a description see http://hal.inria.fr/inria-00166947/en, we have realized that some SIP stack engines have serious bugs allowing to an attacker to automatically make a remote phone accept the call without ringing and without asking the user t...