795 matches found
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from the fact tha...
PT-2021-23833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the fax extension may have risky characters because it is not constrained to be numeric. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
PT-2021-23832 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.30 Description: An issue was discovered where the FAX file name may contain risky characters, potentially leading to security issues. Recommendations: For versions prior to 4.5.30, update to version 4.5.30 or...
FusionPBX 安全漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from a fax file...
Office 365 Phishing Campaign Abuses Stolen Amazon SES Token
A surge in spearphishing emails designed to steal Office 365 credentials include some that were rigged to look like they came from major brands, including Kaspersky. According to a Kaspersky security bulletin posted Monday, two phishing kits identified as “Iamtheboss” and “MIRCBOOT’ are being use...
Modesty Pdf2json 缓冲区错误漏洞
PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...
How to Mitigate Microsoft Print Spooler Vulnerability – PrintNightmare
This week, PrintNightmare - Microsoft's Print Spooler vulnerability CVE-2021-34527 was upgraded from a 'Low' criticality to a 'Critical' criticality. This is due to a Proof of Concept published on GitHub, which attackers could potentially leverage for gaining access to Domain Controllers. As we...
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability...
Remote code execution
Windows Fax Service Remote Code Execution Vulnerability...
Remote code execution
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-24077
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2021-24077 Windows Fax Service Remote Code Execution Vulnerability
...
CVE-2021-24077
CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...
CVE-2021-1722
CVE-2021-1722 is a Windows Fax Service Remote Code Execution vulnerability. Affects Windows Fax Service through a network attack with no authentication; CVSS v3.1 base score up to 9.8 (C:H/I:H/A:H; AV:N; UI:N; PR:N; S:U). OpenVAS/NVD entries corroborate network-based RCE with high impact to confi...
CVE-2021-1722 Windows Fax Service Remote Code Execution Vulnerability
...
The vulnerability of the Fax Service in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Fax Service in Windows operating systems is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...