CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

PT-2025-42182

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.68.39 FreePBX versions prior to 17.0.18.38 Description FreePBX, an open source GUI for managing Asterisk, contains a reflected cross-site scripting issue on the Asterisk HTTP Status page. The page is exposed by...

EUVD-2018-4242

Malware in sbrugna...

EUVD-2015-1370

Malware in sbrugna...

EUVD-2020-5137

Malware in sbrugna...

EUVD-2021-2069

Malware in sbrugna...

EUVD-2013-2449

Malware in sbrugna...

EUVD-2003-0101

Malware in sbrugna...

EUVD-2006-5710

Malware in sbrugna...

EUVD-2013-2812

Malware in sbrugna...

EUVD-2013-0610

Malware in sbrugna...

EUVD-2013-5850

Malware in sbrugna...

EUVD-2023-58908

Malicious code in bioql PyPI...

EUVD-2023-3224

Malicious code in bioql PyPI...

EUVD-2025-29112

Malicious code in bioql PyPI...

EUVD-2024-28061

Malicious code in bioql PyPI...

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

DEBIAN-CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

UBUNTU-CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

CVE-2025-54291 Project existence disclosure in LXD images API

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...