535 matches found
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab 인증 우회를 통한 임의 파일 읽기 기술적 세부 사항은 블로그 게시물을 참조하세요. / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab Authentication Bypass and Arbitrary File Read exploit...
Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...
Mitel MiCollab <= 9.8.0.33 - SQL Injection
A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...
CVE-2024-41713-PoC-exploit
CVE-2024-41713-PoC-exploit Mitel MiCollab 인증 우회를 통한 임의 파일 읽기 ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody ❯ cat debugresponse.txt root:x:0:0:root:/root:/bin/bash...
PoC-CVE-2025-52913
CVE-2025-52913 - MiCollab 경로 정규화 취약점 📌 개요 이 저장소는 Mitel MiCollab에 영향을 미치는 경로 정규화 취약점인 CVE-2025-52913 에 대한 개념 증명PoC을 포함하고 있습니다. 이 문제는 인증되지 않은 공격자가 ..;와 같은 조작된 URL 시퀀스를 활용하여 의도된 경로 제한을 우회하고 내부 애플리케이션 엔드포인트에 접근할 수 있도록 합니다. ⚠️ 영향 성공적인 악용을 통해 다음이 가능할 수 있습니다: 내부 및 제한된 엔드포인트에 접근 민감한 애플리케이션 구성 요소 노출 잠재적 정보...
CVE-2024-41713POC
CVE-2024-41713POC Mitel MiCollab 기업 협업 플랫폼의 임의 파일 읽기 취약점CVE-2024-41713은 Mitel MiCollab 소프트웨어의 NuPoint 통합 메시징NPM 구성 요소에 인증 우회 취약점이 존재하고 입력 검증이 부족하여, 인증되지 않은 원격 공격자가 이 취약점을 이용해 경로 순회 공격을 수행할 수 있습니다. 성공적으로 악용될 경우 사용자 데이터 및 시스템 구성에 대한 무단 액세스, 파괴 또는 삭제로 이어질 수 있습니다. 영향 범위: version MiCollab 9.8 SP2...
Mitel MiCollab - Information Disclosure & Denial of Service
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...
CVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...
CVE-2023-25597
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to...
CVE-2018-18819
A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 7.3.0.601 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP2 8.0.2.202, and MiVoice Business Express versions 7.3 PR3 7.3.1.302 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP1 8.0.2.202, could allow creation of...
CVE-2022-26143
The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...
CVE-2024-41714
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 9.8.1.5 and MiVoice Business Solution Virtual Instance MiVB SVI through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful...
CVE-2019-12165
MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...
The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform allows a hacker to execute arbitrary SQL commands.
The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
EUVD-2019-8992
Malware in sbrugna...
EUVD-2019-9222
Malware in sbrugna...
EUVD-2020-18290
Malware in sbrugna...
EUVD-2020-19853
Malware in sbrugna...