CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Teléfono SIP de la serie Mitel 6900w: bypass temporal de autenticación Detalles de la vulnerabilidad Resumen Consiste en una vulnerabilidad de bypass temporal de autenticación en el panel web administrativo HTTP de varios productos Mitel. Impacto Permite a un...

Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

Mitel MiCollab <= 9.8.0.33 - SQL Injection

A vulnerability in NuPoint Messenger NPM of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

PoC-CVE-2025-52913

CVE-2025-52913 - Vulnerabilidad de Normalización de Rutas en MiCollab 📌 Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-52913 , una vulnerabilidad de normalización de rutas que afecta a Mitel MiCollab. El problema permite a atacantes no autenticados evadir l...

CVE-2024-41713-PoC-exploit

CVE-2024-41713-PoC-exploit Mitel MiCollab: Bypass de Autenticación para Lectura Arbitraria de Archivos root@kitploit: ❯ ./cve-2024-41713-exploit.sh Exploiting CVE-2024-41713 to read /etc/passwd ... + Extracted users from /etc/passwd: root bin daemon adm lp mail operator games ftp nobody...

CVE-2024-41713POC

CVE-2024-41713POC Vulnerabilidad de lectura arbitraria de archivos en la plataforma de colaboración empresarial Mitel MiCollab CVE-2024-41713. Debido a una vulnerabilidad de omisión de autenticación en el componente NuPoint Unified Messaging NPM del software Mitel MiCollab, junto con una validaci...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Bypass de Autenticación para Lectura Arbitraria de Archivos Consulte nuestra publicación en el blog para obtener detalles técnicos root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

CVE-2025-52914

CVE-2025-52914 How does this detection method work? Versions are extracted from target hosts, specifically the SVRVER html response in the body, and then matches on versions prior to 9.3.1 and versions from 10.0.26 to 10.1.101 inclusive. How do I run this script? 1. Download Nuclei from here 2...

CVE-2021-26714

CVE-2021-26714 Vulnerabilidad de Directory Traversal en el portal de Enterprise License Manager en Mitel MiContact Center Enterprise anterior a la versión 9.4. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle...

Mitel MiCollab - Information Disclosure & Denial of Service

Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...

Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

Mitel 6800 / 6900 / 6900w Series SIP Phone Argument Injection Vulnerability (CVE-2024-41710)

According to its self-reported version, the remote Mitel IP Phone running SIP Software is affected by an argument injection vulnerability: - A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, through R6.4.0.HF1 R6.4.0.136 could allow an authenticated attacker with...

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

MAL-2026-1793 Malicious code in mitel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b245c6094f27ca33a5e473960bae859b490202b55590d7a60317d5b5f1b4330 The package mitel was found to contain malicious code...

Malicious code in mitel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b245c6094f27ca33a5e473960bae859b490202b55590d7a60317d5b5f1b4330 The package mitel was found to contain malicious code...

CVE-2025-67822

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 7.3.0.0.50 through 7.8 SP1 7.8.1.0.14 could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gai...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...