kyocera-cve-2022-1026

kyocera-cve-2022-1026 Kyocera 打印机中存在一个未认证的数据提取漏洞，该漏洞允许恢复明文形式的通讯录和域绑定密码。 漏洞概述 早在 2021 年的一次渗透测试中，我在摆弄 Kyocera 用于远程管理打印机的胖客户端应用程序。在对该应用程序的流量进行代理时，我发现 Kyocera 在 9091/TCP 端口上的 SOAP API 在执行敏感操作时未正确处理身份验证。Kyocera MFP 可以配置用于公司域绑定的凭据、FTP 凭据、文件共享凭据等。在未认证的情况下，可以以明文形式检索 MFP 存储的所有凭据。 我的完整分析文章可在 Rapid7...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Solo pruebas autorizadas. Este proyecto se proporciona con fines educativos y de validación defensiva en entornos que usted posee o para los que tiene permiso explícito para probar. No lo utilice contra sistemas que no posea o administre. Una comprobación de exposici...

ios-gamed-0day

Exploit de gamed en iOS corregido en 15.0.2 Actualización: Apple ha corregido esto silenciosamente en iOS 15.0.2 sin ningún tipo de reconocimiento o crédito público. Cualquier aplicación instalada desde App Store puede acceder a los siguientes datos sin que el usuario reciba ningún aviso: Correo...

CVE-2025-63579

CVE-2025-63579 Unauthorized access to all user names and passwords entered in the Address Book feature found in Kyocera Command Center RX printers. Description Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that...

CVE-2026-63563

CVE-2026-63563 - Modificación no autenticada de la libreta de direcciones en impresoras multifunción Sharp MX/BP Aviso del fabricante: Aviso de seguridad de producto de Sharp 2026-004 publicado el 31 de julio de 2026 Resumen Las impresoras multifunción de la serie Sharp MX/BP exponen la libreta d...

CVE-2023-49367

CVE-2023-49367 - Sensetive Data Exposure Sensetive Data Exposure in Kyocera Printer Web Panel Vendor: Kyocera Corporation Affected Versions: Command Center RX - EXOSYS M5521cdn Description After connecting to the Kyocera interface address book, test requests for smb and ftp can be seen in the sen...

kygocera

kygocera CVE-2022-1026 Versión mejorada en Golang del PoC de Rapid7 para CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ créditos a Aaron Herndon / https://twitter.com/ac3lives saludos a https://github.com/D4RKMATT3R CVE-2022-1026...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Basado en el exploit original de Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ Créditos para Aaron Herndon / https://twitter.com/ac3lives /...

CVE-2025-1015

CVE-2025-1015: La libreta de direcciones de Thunderbird contiene campos URI sin sanitizar que podrían ser explotados por atacantes. Al crear una libreta de direcciones con enlaces maliciosos, un atacante puede engañar a otro usuario para que importe la libreta de direcciones comprometida. Si el...

Astra Linux – Vulnerability in Thunderbird

The Thunderbird Address Book’s URI fields contained unsanitized links. Attackers could use these links to create and export an address book containing malicious payloads in certain fields. For example, in the “Other” field of the Instant Messaging section. If another user imported the address boo...

CVE-2026-52829 ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-stack listener configuration. The handshake path canonicalized an IPv4-mapped IPv6 PeerSocketAddr such as ::ffff:127.0.0.1 ...

CVE-2026-52829

An unauthenticated remote peer can deterministically crash any synced zebrad node (v4.4.1 and earlier) on the default Linux dual-stack listener by completing a P2P handshake and advertising an invalid mempool transaction; the crash fires after the 30-second misbehavior batch flush due to an IPv4-...

Linux Distros Unpatched Vulnerability : CVE-2026-74999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the Add to address book action was subject to stored XSS. CVE-2026-74999 Note that Nessus relies on t...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-74999

Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3 is affected by a stored XSS in the "Add to address book" action. An authenticated attacker can inject malicious script that executes in the context of another user's session when they interact with the crafted address book entry. The CVSS 3.1...

EUVD-2026-60166

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...