Asterisk — PoC Archivehttps://poc.intelseclab.com/tags/asterisk/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000FreePBX Unauthenticated SQL Injection to RCE (CVE-2025-57819)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-57819-freepbx-sqli-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-57819-freepbx-sqli-rce/Critical severity (CVSS 9.8) — web · CVE-2025-57819. Status: Weaponized. Affects: Sangoma FreePBX administrator web UI (admin/ajax.php, endpoint module). Tags: freepbx, sangoma, sqli, unauthenticated, ajax-php, cron-jobs, reverse-shell, voip, asterisk, cwe-89.webCriticalfreepbxsangomasqliunauthenticatedajax-phpcron-jobsreverse-shellvoipasteriskcwe-89PJSIP DNS Compression Pointer Heap Out-of-Bounds Read (CVE-2026-32945)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32945-pjsip-dns-oob-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32945-pjsip-dns-oob-read/Medium severity — network · CVE-2026-32945. Status: PoC. Affects: pjproject (PJSIP library) — used by Asterisk, FreeSWITCH, and other SIP applications. Tags: pjsip, pjproject, dns, heap-oob-read, denial-of-service, asterisk, freeswitch, sip.networkMediumpjsippjprojectdnsheap-oob-readdenial-of-serviceasteriskfreeswitchsip