802 matches found
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
Session fixation
An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...
CVE-2021-43406
An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...
Design/Logic Flaw
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
CVE-2021-43404
An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...
CVE-2021-43404
CVE-2021-43404 affects FusionPBX prior to 4.5.30, where the FAX file name may contain risky characters. The issue is defined with both CVSS vectors (2.0: 6.5 (MEDIUM), 3.1: 8.8 (HIGH)) indicating network-accessible impact with high confidentiality, integrity, and availability implications. Connec...
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from the fact tha...
FusionPBX 输入验证错误漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from faxpostsize ma...
PT-2021-23832 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the FAX file name may contain risky characters, potentially leading to security issues. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from a fax file...
PT-2021-23833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the fax extension may have risky characters because it is not constrained to be numeric. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
Office 365 Phishing Campaign Abuses Stolen Amazon SES Token
A surge in spearphishing emails designed to steal Office 365 credentials include some that were rigged to look like they came from major brands, including Kaspersky. According to a Kaspersky security bulletin posted Monday, two phishing kits identified as “Iamtheboss” and “MIRCBOOT’ are being use...
Modesty Pdf2json 缓冲区错误漏洞
PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...
How to Mitigate Microsoft Print Spooler Vulnerability – PrintNightmare
This week, PrintNightmare - Microsoft's Print Spooler vulnerability CVE-2021-34527 was upgraded from a 'Low' criticality to a 'Critical' criticality. This is due to a Proof of Concept published on GitHub, which attackers could potentially leverage for gaining access to Domain Controllers. As we...
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability...