18327 matches found
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's...
EUVD-2026-67714
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078
CVE-2026-82078 is an unsafe dynamic class loading vulnerability (CWE-470, CVSS 9.4 Critical) in the database connection utilities of PaperCut NG and PaperCut MF . The application instantiates database driver classes from configurable names without an allowlist, allowing arbitrary Java bytecode to...
CVE-2026-80723
CVE-2026-80723 affects the Linux kernel in the of: reserved_mem subsystem. During boot, the function fdt_scan_reserved_mem() stores each dynamically-placed /reserved-memory subnode into a local array of fixed size MAX_RESERVED_REGIONS. When the device tree defines more dynamically-placed regions ...
CVE-2026-80723
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
VulnCheck KEV: CVE-2026-82078
PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ROS-20260828-73-0020
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Sensor Data Service system service in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Sensor Data Service system service in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2026-82078: Use of Externally-Controlled Input to Select Classes or Code
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the RPC Runtime Library for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the RPC Runtime Library in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktop operations is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the Shell command shell in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Device Association Service on Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...