680 matches found
CVE-2025-57457
CURO UC300 IP 전화기의 OS 명령 주입 취약점 Curo UC300 5.42.1.7.1.63R1의 관리자 패널에서 발견된 OS 명령 주입 취약점으로, 로컬 공격자가 "IP Addr" 파라미터를 통해 임의의 OS 명령을 주입할 수 있습니다. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 절차 1. UC300의 관리자 패널에 로그인합니다 전화기 IP 및 포트 80 2. Network로 이동한 후 Diagnostics를 선택합니다 ...
CVE-2020-13886
PoC: https://youtu.be/nNKBRx8IglI root@kitploit: ------------------------------------------------------------------------------------------------------------- ------------- 0day: IP 전화 TIP200/200 LITE & TIP 300 | 로컬 파일 포함 | ---------------------------- ------------------------------- P0c 작성자: Ls4...
CVE-2020-3161
CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...
Cisco IP and Video Phone Multiple Vulnerabilities (cisco-sa-ipphone-multi-vulns-cXAhCvS)
According to its self-reported version, the remote Cisco IP or Video Phone running SIP Software is affected by multiple vulnerabilities: - A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device t...
CVE-2026-5922
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage...
CVE-2026-5922
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage...
CVE-2026-5923
Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage...
CVE-2018-10091
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS...
CVE-2021-33478
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...
CVE-2025-20351
CVE-2025-20351 affects Cisco Desk Phone 9800 Series, IP Phone 7800/8800 Series, and Video Phone 8875 running Cisco SIP Software. The web UI fails to sufficiently validate user-supplied input, enabling unauthenticated remote XSS when a user is persuaded to click a crafted link. Impact could includ...
CVE-2025-20351 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web ...
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Vulnerabilities
Multiple vulnerabilities in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or conduct a cross-site...
PT-2025-42379
Name of the Vulnerable Software and Affected Versions Cisco Desk Phone 9800 Series Cisco IP Phone 7800 Series Cisco IP Phone 8800 Series Cisco Video Phone 8875 Description A flaw exists in the web UI of the listed Cisco phone series running Cisco SIP Software that could allow a remote,...
EUVD-2017-15710
Malware in sbrugna...
EUVD-2017-3901
Malware in sbrugna...
EUVD-2018-7312
Malware in sbrugna...
EUVD-2008-0541
Malware in sbrugna...