Lucene search
K

8 matches found

CVE
CVE
added 2026/02/11 8:49 p.m.11 views

CVE-2020-37153

CVE-2020-37153 affects ASTPP 4.0.1. The vulnerability set includes cross-site scripting and command injection in the SIP device configuration and plugin management interfaces. Attackers could inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root p...

9.8CVSS5.7AI score0.04428EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/11 8:49 p.m.23 views

CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with...

9.8CVSS0.04428EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-9495

Malicious code in bioql PyPI...

5.6CVSS6.6AI score0.01407EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2021/12/29 3:15 p.m.439 views

Exploit for CVE-2021-40859

CVE-2021-40859 Auers...

10CVSS9.7AI score0.71979EPSS
Exploits6
HackRead
HackRead
added 2021/12/21 5:1 p.m.19 views

Two backdoors detected in Auerswald VoIP ystem

By Deeba Ahmed The backdoors were detected during penetration testing by RedTeam Pentesting GmbH. This is a post from HackRead.com Read the original post: Two backdoors detected in Auerswald VoIP ystem...

3.4AI score
Exploits0
The Hacker News
The Hacker News
added 2021/12/21 10:24 a.m.96 views

Secret Backdoors Found in German-made Auerswald VoIP System

Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol VoIP appliance from Auerswald, a German telecommunications hardware manufacturer, that could be abused to gain full administrative access to the devices. "Two backdoor...

10CVSS9.8AI score0.71979EPSS
Exploits6
OSV
OSV
added 2015/02/09 11:59 a.m.1 views

UBUNTU-CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

3.5CVSS5.8AI score0.0303EPSS
Exploits0References5
0day.today
0day.today
added 2013/11/29 12:0 a.m.26 views

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

7.6AI score
Exploits0
Rows per page
Query Builder