Multiple AVM FRITZ!Box VoIP Remote Code Execution

Several models of the AVM FRITZ!Box are vulnerable to a heap-based buffer overflow, which allows attackers to execute arbitrary code on the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

vsaudit - VOIP Security Audit Framework

This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start using...

Audit SIP Based VoIP Systems: SIPVicious

Audit SIP Based VoIP Systems SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. The idea behind the tools is to aid administrators and security folks make informed decisions when evaluating the security of their SIP-based servers and devices. The tools are intend...

Polycom VVX Web Interface Forced Admin Password Change Vulnerability

Polycom is a global leader in standards-based unified communications UC solutions for telepresence, video and voice. The Polycom VVX web interface can be forced to change the admin password vulnerability, which requires a user to access the "user" account in the web interface of a Polycom VoIP...

Polycom VVX Web Interface - Change Admin Password

Polycom VVX Web Interface - Change Admin Password Exploit Title: Polycom VVX Web Interface - Change Admin Password as User Date: January 26, 2017 Exploit Author: Mike Brown Vendor Homepage: http://www.polycom.com/ Software Link: http://downloads.polycom.com/voice/voip/ucswreleasesmatrix.html...

3CX Phone System VAD_Deploy.aspx Arbitrary File Upload

An arbitrary file upload vulnerability exists in 3CX VoIP Phone System Manager. The vulnerability is due to failure to restrict file uploads in VADDeploy.aspx. A remote unauthenticated attacker can exploit this vulnerability by sending maliciously crafted requests to the target server...

Skyping And Typing Threatens Privacy

Multitasking while on a work-related Skype call may be good for productivity, but perhaps not so much for privacy. Typing while using Skype or over other Voice over Internet Protocol VoIP services presents an opportunity for an attacker to record the conversation, separate out the emanations from...

Inteno EG101R1 VoIP Router - unauthorized modifications to DNS

No description provided by source. if $ -gt 3 || $ -lt 2 ; then echo " Inteno EG101R1 VoIP Router " echo " Unauthenticated Remote DNS Change Exploit" echo " ===================================================================" echo " Usage: $0 " echo " Example: $0 133.7.133.7 8.8.8.8" echo "...

Inteno EG101R1 VoIP Router - DNS Change

Inteno EG101R1 VoIP Router - DNS Change !/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is...

Inteno EG101R1 VoIP Router - DNS Change

!/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Inteno EG101R1 VoIP Router - Unauthenticated DNS Change

Exploit for cgi platform in category web applications !/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface,...

Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Changer

!/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

voip.voip-info.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-180884 Description| Value ---|--- Affected Website:| voip.voip-info.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Cisco Small Business SPA Series VoIP Device Detection (SIP)

SIP based detection of Cisco Small Business SPA Series VoIP devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tcPbX VoIP phone system tcpbx_lang local file inclusion vulnerability

No description provided by source...

SQL Injection Vulnerability in Name Parameter of VoIP Operation Support System of Kunshi Network Technology Co.

The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. A SQL injection vulnerability exists in the name parameter of the VoIP operation support system of Kunshi Network Technology Co. An attacker can exploit...

tcPbX VoIP Remote Detection

Detects the installed version of tcPbX VoIP. This script sends an HTTP GET request and tries to ensure the presence of tcPbX VoIP. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

tcPbX < 1.2.1 'tcpbx_lang' Parameter Local File Inclusion Vulnerability - Active Check

tcPbX VoIP phone system is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

tcPBX Remote File Disclosure

Vulnerable hardware : tcpbx voip distro Vendor : www.tcpbx.org Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , tcPbX is a complete and functional VoIP phone system based on Asterisk open source software and CentOS operating system. The simplified...

ZYCOO IP Phone System Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunication in SMB Small and Medium-sized Business market...