15 matches found
CVE-2025-57819-FreePBX-RCE2Root
CVE-2025-57819 — FreePBX SQLi → RCE → Root PoC de cadena completa para CVE-2025-57819. La inyección SQL basada en errores no autenticada en el módulo endpoint de FreePBX encadena hasta una shell root mediante la inyección de trabajos cron y la escalada de privilegios por incron. Solo para pruebas...
HackTheBox-Connected
Hack The Box: Connected — Writeup de Pentesting Profesional -blue?style=for-the-badge&logo=linux 📋 Resumen Ejecutivo Connected es una máquina Linux basada en CentOS que ejecuta el sistema de comunicaciones VoIP FreePBX v16.0.40.7 integrado con Asterisk. El flujo de explotación Attack Vector / Kil...
FreePBX-SQLi-Exploit-Privilege-escalation
FreePBX: De Inyección SQL No Autenticada a Shell Root CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Resumen Ejecutivo Este documento detalla el compromiso completo de la máquina HTB Connected. La cadena de ataque comienza con una vulnerabilidad de inyección SQL no autenticada en FreePBX, q...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX: From Unauthenticated SQL Injection to Root Shell...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for...
EUVD-2009-3570
Malware in sbrugna...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
DEBIAN-CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
Code injection
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table...
CVE-2009-3589
CVE-2009-3589 affects incron 0.5.5. The issue is that when running a process from a user’s incrontabs, supplementary groups are not initialized, causing the process to run with the incrond supplementary groups and potentially letting local users gain privileges via an incrontab table. Public deta...