faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

faxhell

faxhell "팩스 셸" Fax 서비스와 Ualapi.dll 기반 DLL 하이재킹을 사용하는 개념 증명 바인드 셸입니다. 저희 분석 글은 다음에서 확인하세요: https://windows-internals.com/faxing-your-way-to-system/ 사용 방법 Ualapi.dll을 빌드하여 c:\windows\system32에 배치합니다. Fax 서비스를 시작하면 DLL이 로드되고 UalStart 내보내기가 호출됩니다. UalStart는 스레드 풀 작업 항목을 큐에 넣고, 이 작업 항목은 RpcSs에 대한 핸들을 ...

NoFaxGiven

NoFaxGiven - NETWORK SERVICE FAX 服务中的代码执行与持久化 传真路由扩展是一个为传真服务添加路由功能的 DLL。一台服务器上可以驻留多个传真路由扩展。当传真服务器接收到传真传输时，它会按优先级顺序将收到的文档依次传递给每个传真路由扩展。 用户使用传真服务管理应用程序（Microsoft 管理控制台 MMC 管理单元）设置路由优先级。当应用程序请求连接到 FAX 服务时（例如在 MMC 中加载 fxsadmin），FAX 服务会手动运行。在桌面系统上，该服务存在，但由于需要配置和角色，尝试设置扩展时会超时。 更多信息请参阅...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: クロスサイト・リクエスト・フォージェリ CSRF 概要 CVE ID: CVE-2023-37598 脆弱性タイプ: クロスサイト・リクエスト・フォージェリ CSRF 影響を受ける製品: issabel-pbx v4.0.0-6 深刻度: 中 発見者: Sahil Ojha 公開日: 10/07/2023 ベンダーホームページ: https://www.issabel.org/ ソフトウェアリポジトリ: https://github.com/IssabelFoundation/issabelPBX 検証OS:...

CVE-2026-72944

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69621

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69509

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73530

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69509

CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....

CVE-2026-72944

CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...

EUVD-2026-73110

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

EUVD-2026-73004

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

Role: Windows Fax Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

Role: Windows Fax Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

Astra Linux – Vulnerability in Tiff

A flaw was discovered in libtiff. A specially crafted TIF file can cause a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2671)

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2507)

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...

Best of Android Fax Apps: Top 5 Secure Picks for 2026

Discover the best of Android fax apps to send and receive secure documents on the go. Compare Municorn Fax App, Fax.Plus, and other top Android tools...

Debian dsa-6332 : libokular5core10 - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6332 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6332-1 [email protected] https://www.debian.org/security/...