CVE-2021-32824

Apache Dubbo (Java RPC framework) versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via the Telnet handler. An unprotected Telnet endpoint allows arbitrary bean inspection and shutdown, while the invoke handler processes arguments with FastJson then realises the...

PT-2021-19956 · Apache · Apache Dubbo

Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions prior to 2.6.10 and 2.7.10 Description: Apache Dubbo is a Java-based, open-source RPC framework. The issue concerns pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main...

Microsoft Internet Explorer Multiple Vulnerabilities (2559049)

This host is missing a critical security update according to Microsoft Bulletin MS11-057. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1961

The CVE-2011-1961 issue affects Internet Explorer 6–9, where the telnet URI handler does not reliably load telnet.exe, allowing remote code execution when a user opens a crafted HTML/URL (e.g., via SMB-shared content). Exploitation relies on loading a telnet URI and may require user action to vie...

Microsoft Internet Explorer Telnet Handler Remote Code Execution (MS11-057; CVE-2011-1961)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer telnet handler. A remote attacker could trigger this flaw by enticing an unsuspecting user to open a web page containing malicious content. Successful exploitation may enable an attacker to take complete contro...

Fedora Core 1 : kdelibs-3.1.4-5 (2004-121)

iDEFENSE identified a vulnerability in the Opera Web Browser that could allow remote attackers to create or truncate arbitrary files. The KDE team has found that a similar vulnerability exists in KDE. A flaw in the telnet URL handler can allow options to be passed to the telnet program which can ...

PT-2004-1550 · Kde +1 · Konqueror +2

Name of the Vulnerable Software and Affected Versions: KDE versions 3.2.2 and earlier Description: The issue is related to the URI handlers in Konqueror, which do not properly filter "-" characters that begin a hostname in certain URIs, such as telnet, rlogin, ssh, or mailto. This allows remote...