796 matches found
faxhell
faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...
faxhell
faxhell "Fax Shell" Un shell de enlace de prueba de concepto que utiliza el servicio Fax y un secuestro de DLL basado en Ualapi.dll. Consulte nuestro análisis en: https://windows-internals.com/faxing-your-way-to-system/ Cómo usar Compila Ualapi.dll y colócalo en c:\windows\system32 Inicia el...
NoFaxGiven
NoFaxGiven - Code Execution & Persistence in NETWORK SERVICE FAX Service A fax routing extension is a DLL that adds routing functionality to the fax service. Multiple fax routing extensions can reside on one server. When the fax server receives a fax transmission, it routes the received document...
CVE-2023-37598
CVE-2023-37598 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF Overview CVE ID: CVE-2023-37598 Vulnerability Type: Cross-Site Request Forgery CSRF Affected Product: issabel-pbx v4.0.0-6 Severity: Medium Discovered by: Sahil Ojha Disclosure Date: 10/07/2023 Vendor Homepage:...
CVE-2026-72944
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69621
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69509
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73530
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69509
CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....
CVE-2026-72944
CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...
EUVD-2026-73110
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69621
CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...
EUVD-2026-73004
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
Astra Linux – Vulnerability in Tiff
A flaw was discovered in libtiff. A specially crafted TIF file can cause a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...
Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2671)
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2507)
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...
