358 matches found
CVE-2026-73662
CVE-2026-73662 affects FreePBX Music on Hold module (versions 17.0.1–17.0.7). The vulnerability arises from validateCustomConfiguration() in Music.class.php allowing dangerous command-line options to mpg123 and other allowed players, enabling an authenticated administrator to write files, open co...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
Slackware Linux 15.0 / current mpg123 Vulnerability (SSA:2026-117-01)
The version of mpg123 installed on the remote host is prior to 1.33.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-117-01 advisory. New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
[slackware-security] mpg123
New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mpg123-1.33.5-i586-1.txz: Upgraded. mpg123: Fix generic control mode for largefile-sensitive builds, where 32 bit offt was used with...
MiracleLinux 8 : mpg123-1.32.9-1.el8_10 (AXSA:2024-9431:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9431:01 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 9 : mpg123-1.32.9-1.el9_5 (AXSA:2024-9488:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9488:02 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
EUVD-2004-0803
Malware in sbrugna...
EUVD-2007-0576
Malware in sbrugna...
EUVD-2014-9314
Malware in sbrugna...
EUVD-2003-0571
Malware in sbrugna...
EUVD-2017-4334
Malware in sbrugna...
EUVD-2004-1281
Malware in sbrugna...
EUVD-2006-3352
Malware in sbrugna...
EUVD-2017-2330
Malware in sbrugna...
EUVD-2004-0980
Malware in sbrugna...
EUVD-2006-1656
Malware in sbrugna...
EUVD-2017-2763
Malware in sbrugna...