210 matches found
CVE-2023-31860
Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system...
CVE-2023-31860
Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system...
CVE-2023-31860
Wuzhi CMS v3.1.2 has a storage-type XSS vulnerability in the backend of the Five Finger CMS b2b system. Affected component: Wuzhi CMS core/backend; vulnerability type: storage XSS. Documented impact is limited to a cross-site script in backend contexts; CVSSv3.1 base score 5.4 (Medium) with netwo...
OESA-2023-1258 shadow security update
This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts. Security Fixes: In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although i...
K88251614: GNU Finger vulnerability CVE-1999-0612
Security Advisory Description A version of finger is running that exposes valid user information to any entity on the network. CVE-1999-0612 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently...
SUSE CVE-2019-9450
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-1999-0612 affecting package finger for versions less than 0.17-4
CVE-1999-0612 affecting package finger for versions less than 0.17-4. A patched version of the package is available...
CVE-1999-0150 affecting package finger for versions less than 0.17-4
CVE-1999-0150 affecting package finger for versions less than 0.17-4. A patched version of the package is available...
A version of finger is running that exposes valid user information to any entity on the network.
...
Windows finger command abused to download MineBridge backdoor
By Habiba Rashid A new phishing campaign has been identified which uses the Windows Finger command to download a malware variant called MineBridge. This is a post from HackRead.com Read the original post: Windows finger command abused to download MineBridge backdoor...
Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software
Title: Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software Author: John Page aka hyp3rlinx Date: 2020-09-16 Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/WindowsTCPIPFingerCommandC2ChannelandBypassingSecuritySoftware.txt...
Microsoft Windows Finger Security Bypass / C2 Channel Exploit
Microsoft Windows TCPIP Finger Command finger.exe that ships with the OS, can be used as a file downloader and makeshift C2 channel. Legitimate use of Windows Finger Command is to send Finger Protocol queries to remote Finger daemons to retrieve user information. However, the finger client can al...
Microsoft Windows Finger Security Bypass / C2 Channel
Title: Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WindowsTCPIPFingerCommandC2ChannelandBypassingSecuritySoftware.txt + twitter.com/hyp3rlinx +...
CVE-1999-0612 affecting package finger 0.17-4
CVE-1999-0612 affecting package finger 0.17-4. A patched version of the package is available...
CVE-1999-0150 affecting package finger 0.17-4
CVE-1999-0150 affecting package finger 0.17-4. A patched version of the package is available...
Lexmark Printer Information Disclosure Vulnerability (TE923)
Some Lexmark devices have the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
CVE-2019-10059
The legacy finger service TCP port 79 is enabled by default on various older Lexmark devices...
CVE-2019-10059
The legacy finger service TCP port 79 is enabled by default on various older Lexmark devices...
CVE-2019-10059
The CVE-2019-10059 entry concerns the legacy finger service (TCP port 79) enabled by default on various older Lexmark devices. Multiple connected sources confirm this configuration across Lexmark printers and related hardware, with no public exploit details provided in the supplied documents. The...
