426 matches found
CVE-2025-30004
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...
CVE-2025-30004
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...
CVE-2025-30004 Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...
CVE-2025-30004
CVE-2025-30004 — Xorcom CompletePBX Authenticated Command Injection Affected: Xorcom CompletePBX versions up to 5.2.35 (all editions).Root cause: Authenticated command injection in the Task Scheduler subsystem; unsanitized parameters allow execution of arbitrary commands with web server/root priv...
CVE-2025-30004 Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...
PT-2025-13802
Name of the Vulnerable Software and Affected Versions Xorcom CompletePBX versions prior to 5.2.35 Description The issue affects the administrator Task Scheduler functionality, allowing attackers to execute arbitrary commands as the root user. Recommendations For versions prior to 5.2.35, update t...
CVE-2025-30004: Improper Neutralization of Special Elements used in an OS Command
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...
Xorcom CompletePBX Authenticated Command Injection via Task Scheduler
This module exploits an authenticated command injection vulnerability in Xorcom CompletePBX versions use exploit/linux/http/xorcom/completepbxscheduler msf undefinedcompletepbxscheduler show actions ...actions... msf undefinedcompletepbxscheduler set ACTION msf undefinedcompletepbxscheduler show...
CVE-2024-49072
Windows Task Scheduler Elevation of Privilege Vulnerability...
CVE-2024-49072
Windows Task Scheduler Elevation of Privilege Vulnerability...
The vulnerability of the Windows Task Scheduler, a scheduling tool for operating systems, allows a malicious individual to exploit their elevated privileges.
The vulnerability of the Windows Task Scheduler, a task scheduling tool for Windows operating systems, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability
...
CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability
...
CVE-2024-49072
Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.
Windows Task Scheduler Elevation of Privilege Vulnerability
...
PT-2024-9324 · Microsoft · Windows Task Scheduler +1
Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Task Scheduler. It is associated with a buffer overflow in dynamic memory. Exploitation of this...
Microsoft Windows Task Scheduler 安全漏洞
Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to elevate...
CVE-2024-49072: Heap-based Buffer Overflow
Windows Task Scheduler Elevation of Privilege Vulnerability...
About Elevation of Privilege – Windows Task Scheduler (CVE-2024-49039) vulnerability
About Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 vulnerability. It was released on November Microsoft Patch Tuesday and showed signs of exploitation in the wild right away. To exploit the vulnerability, an authenticated attacker runs a specially crafted application on the targ...
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager NTLM and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 202...