UBUNTU-CVE-2018-16745

An issue was discovered in mgetty before 1.2.1. In faxnotifymail in faxrec.c, the mailto parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it...

PT-2018-13718 · Mgetty +2 · Mgetty +2

Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1 Description: An issue was discovered where the mail to parameter in the fax notify mail function is not sanitized, potentially allowing for command injection if untrusted input can reach it due to the use of...

PT-2018-1575 · Mgetty +2 · Mgetty +2

Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1 Description: An issue in the fax notify mail function in faxrec.c allows for a buffer overflow due to the mail to parameter not being sanitized. This could potentially lead to a denial of service if long untrust...

DEFCON 26 | use of the Fax function of the vulnerability to penetrate into the corporate network Faxploit-a vulnerability warning-the black bar safety net

! From the ancient times of the flying Pigeon pass book to the later postal courier, the author and the recipient between the physical message transfer mode gradually in the evolution, and after that Fax technology to some extent, help people get out of a letter delivered to the dark ages. Howeve...

CVE-2018-15897

PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn...

OpenEMR OS Command Injection Vulnerability (CNVD-2018-18135)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An OS command injection vulnerability exists in OpenEMR versions prior to...

Hackers can compromise your network just by sending a Fax

What maximum a remote attacker can do just by having your Fax machine number? Believe it or not, but your fax number is literally enough for a hacker to gain complete control over the printer and possibly infiltrate the rest of the network connected to it. Check Point researchers have revealed...

DEF CON 2018: Critical Bug Opens Millions of HP OfficeJet Printers to Attack

LAS VEGAS – Tens of millions of fax-ready HP OfficeJet inkjet printers are vulnerable to a simple hack that gives an attacker full control over a targeted printer. Once compromised, the all-in-one OfficeJet could act as a springboard for deeper network penetration by an attacker. Here at DEF CON,...

fax-spam.de XSS vulnerability

Open Bug Bounty ID: OBB-616534 Description| Value ---|--- Affected Website:| fax-spam.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenEMR Access Restriction Bypass Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in the interfaces/fax/faxdispatch.php fil...

Microsoft Office: Disable Internet Fax feature

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013internetfaxfeature.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Internet Fax feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

OpenEMR fax_dispatch.php file OS command injection vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An operating system command injection vulnerability exists in the...

Threat Outbreak Alert RuleID31204: Email Messages Distributing Malicious Software on November 8, 2017

Medium Alert ID: 55812 First Published: 2017 November 8 16:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31204 may contain the following files: Name |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 CompanyName, 2 CompanyAddress, 3 CompanyZip, 4 CompanyTown, 5 Fax, 6 EMail, 7 Web, 8 ManagingDirectors, 9 Note, 10 Capital, 11 ProfId1, 12...

CVE-2017-3011

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3011

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution...

Integer overflow

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3011

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3011

CVE-2017-3011 affects Adobe Acrobat Reader (versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The vulnerability is an exploitable integer overflow in the CCITT fax PDF filter that could lead to arbitrary code execution. The connected documents do not provide addit...

Remote Command Execution Vulnerability in MyFAX Network Fax Server

myFAX Fax Server, also known as myfax e-fax, is an intelligent high-tech product that combines fax technology with network technology. A remote command execution vulnerability exists in myFAX Network Fax Server, which allows remote attackers to execute arbitrary commands via unspecified vectors...