707 matches found
CVE-2023-37596
CVE-2023-37596 — issabel-pbx 4.0.0-6: क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF — किसी भी उपयोगकर्ता को हटाएं गंभीरता: उच्च | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 विषय सूची अवलोकन भेद्यता विवरण प्रभाव प्रभावित संस्करण हमला परिदृश्य प्रमाण अवधारणा पुनरुत्पादन के चरण शमन / उपचा...
CVE-2023-34839
CVE-2023-34839 — Issabel PBX 4.0.0-6 : CSRF vers escalade de privilèges Table des matières Aperçu Détails de la vulnérabilité Logiciel affecté Score CVSS Scénario d'attaque Preuve de concept PoC Étapes pour reproduire Impact Remédiation Références Avertissement Aperçu CVE-2023-34839 est une...
asterisk
Il PBX Open Source AsteriskR root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SICUREZZA È fondamentale leggere e comprendere appieno il contenuto del documento sulle informazioni di sicurez...
Issabel PBX 4.0.0-6 - Directory Listing
An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
Issabel-PBX-4.0.0-RCE-Authenticated
Issabel PBX 4.0.0 Esecuzione di codice remoto autenticato - CVE-2024-0986 Descrizione/Riepilogo Issabel PBX 4.0.0 consente a un utente autenticato di utilizzare la console asteriskcli per creare file con i comandi xmldoc e dump. Ciò consente di eseguire comandi remoti basati sul nome dei file...
CVE-2023-37599
CVE-2023-37599 — issabel-pbx 4.0.0-6: Verzeichnisauflistung Broken Access Control Übersicht issabel-pbx Version 4.0.0-6 enthält eine Schwachstelle durch fehlerhafte Zugriffskontrolle Broken Access Control, die sich als Verzeichnisauflistung Directory Listing ohne Authentifizierung in der...
CVE-2023-37191
CVE-2023-37191 — Issabel PBX 4.0.0-6: Cross-Site Scripting XSS Memorizzato Panoramica...
CVE-2023-37598
CVE-2023-37598 — issabel-pbx 4.0.0-6: Site-übergreifende Anfragefälschung CSRF Übersicht CVE-ID: CVE-2023-37598 Schwachstellentyp: Site-übergreifende Anfragefälschung CSRF Betroffenes Produkt: issabel-pbx v4.0.0-6 Schweregrad: Mittel Entdeckt von: Sahil Ojha Offenlegungsdatum: 10.07.2023...
CVE-2023-37190
CVE-2023-37190 — Issabel-PBX 4.0.0-6: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS 📋 अवलोकन...
CVE-2023-37189
CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Memorizzato Panoramica...
CVE-2023-37597
CVE-2023-37597 — issabel-pbx 4.0.0-6: Falsificação de Solicitação entre Sites CSRF — Exclusão de Grupo de Usuários Aviso legal: Este repositório destina-se exclusivamente a fins educacionais e de pesquisa de segurança autorizada. Não utilize este exploit contra qualquer sistema que você não possu...
CVE-2026-46514
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fmresetpassword in Tools/ResetPassword.php:48-53 returned a plaintext password and fmaddextension in Tools/AddExtension.php:172 returned a plaintext secret; Frogman.class.php:2207-2211 used auditOutcome to JSON-encode...
CVE-2026-44238 FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administration Control Panel account that has CDR section access is required. Full administrator privileges ar...
Metasploit Wrap-Up 03/20/2026
♫ I Just Called ♫ To Say ♫ 7f45 4c46 0201 0100 0000 0000 0000 0000 0300 3e00 0100♫ This release contains 2 new exploit modules, 2 enhancements, and 7 bug fixes. Community contributor Chocapikk submitted both exploit modules this release: one targeting AVideo-Encoder’s getImage.php file and anothe...
EUVD-2026-9856
FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech TTS engine in the recordings module. This issue has been patched in versions 16.0.20...
CVE-2009-4038
Multiple cross-site scripting XSS vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 onok or 2 oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...
CVE-2022-42306
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbxexchange during registration and cause a NULL pointer exception, effectively crashing the pbxexchange process...
