Lucene search
+L

1274 matches found

CVE
CVE
added 2 days ago17 views

CVE-2026-73662

CVE-2026-73662 affects FreePBX Music on Hold module (versions 17.0.1–17.0.7). The vulnerability arises from validateCustomConfiguration() in Music.class.php allowing dangerous command-line options to mpg123 and other allowed players, enabling an authenticated administrator to write files, open co...

7.6CVSS5.6AI score0.00659EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-58485

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

7.6CVSS5.6AI score0.00659EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71883

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

7.6CVSS5.6AI score0.00659EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/11/20 9:37 p.m.15 views

CVE-2025-34330

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

6.9CVSS6.9AI score0.0047EPSS
SaveExploits2References1
OSV
OSV
added 2025/11/19 5:15 p.m.7 views

CVE-2025-34330

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

5.3CVSS5.7AI score0.0047EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2025/11/19 4:22 p.m.5 views

CVE-2025-34330 AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

6.9CVSS6.6AI score0.0047EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2025/11/19 4:22 p.m.22 views

CVE-2025-34330 AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

6.9CVSS0.0047EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-2345

Malware in sbrugna...

6.5CVSS6.4AI score0.02276EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-1386

Malware in sbrugna...

4.3CVSS6.4AI score0.01533EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:0 a.m.14 views

CVE-2012-1361

Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold MMoH feature of Cisco Unified Communications Manager CUCM is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750...

4.3CVSS6.5AI score0.01533EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2024/07/26 7:59 a.m.14 views

classmgmt.com Cross Site Scripting vulnerability OBB-3950767

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/26 7:54 a.m.10 views

bywind.se Cross Site Scripting vulnerability OBB-3950748

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/25 7:47 p.m.15 views

maiutazas.hu Cross Site Scripting vulnerability OBB-3950697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/22 3:24 p.m.10 views

omoide-garage.com Cross Site Scripting vulnerability OBB-3949020

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/22 2:8 a.m.13 views

pinknblu.com Cross Site Scripting vulnerability OBB-3948011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/18 7:58 a.m.7 views

smilemichigan.comrandrpropertyrehab.com.xx3.kz Cross Site Scripting vulnerability OBB-3947302

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/14 4:19 a.m.10 views

ihaem.info Cross Site Scripting vulnerability OBB-3945212

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/09 9:57 a.m.6 views

valvedee.com Cross Site Scripting vulnerability OBB-3942786

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/02 11:26 a.m.8 views

jesuscova.com Cross Site Scripting vulnerability OBB-3940039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/06/17 1:31 p.m.12 views

jung-staatsoper.de Cross Site Scripting vulnerability OBB-3935940

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder