PRET - Printer Exploitation Toolkit

PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given printer language. Currently PostScript, PJL and PCL are supported which are spoken by most laser...

IPP Printer Information Detection

Binary data 7274.pasl...

IPP Server Detection (Internet Printing Protocol)

Binary data 700093.prm...

IPP Server Detection via mDNS

Binary data 700096.prm...

IPP Client Detection (Internet Printing Protocol)

Binary data 700095.prm...

IPP Printer Information Detected

Binary data 700094.prm...

CVE-2017-2403

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL...

CVE-2017-2403

The CVE-2017-2403 entry affects macOS prior to 10.12.4, specifically the Printing component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL. Connected sources confirm the issue is tied to macOS Sierra 10.12.x and that Apple released...

CUPS 2.0.3 - Remote Command Execution

CUPS 2.0.3 - Remote Command Execution !/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2 Version: 2.0....

CUPS Remote Code Execution

!/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2 Version: \n" " -h, --help: Show this message\n" " -...

CUPS 2.0.3 - Remote Command Execution Exploit

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link:...

CVE-2016-8100

Intel Integrated Performance Primitives aka IPP Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack...

CVE-2016-8100

Intel Integrated Performance Primitives aka IPP Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack...

CVE-2016-8100

Intel IPP Cryptography before 9.0.4 is vulnerable to a local-side-channel attack that enables discovery of RSA private keys. Affected product: Intel IPP Cryptography (part of IPP) prior to version 9.0.4. Root cause: information leaked through a side channel allowing a local attacker to recover th...

A vulnerability in Intel Integrated Performance Primitives (IPP) Cryptography allows local users to recover the RSA private key via a potential side-channel.

Summary: The cryptography CP domain in Intel’s newest version of Intel® Integrated Performance Primitives Intel® IPP v2017 has been enhanced to improve its security and customers are strongly urged to update to this release. Description: A potential side-channel vulnerability was identified in th...

ipp-online.org XSS vulnerability

Open Bug Bounty ID: OBB-175803 Description| Value ---|--- Affected Website:| ipp-online.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

IPPUSBXD Elevation of Privilege Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A security vulnerability exists in IPPUSBXD versions prior to 1.22, which originates from the program listening on all interfaces. A remote attacker could exploit the vulnerability by sending a direct request to gain access to a...

IPPUSBXD 'ippusbxd.c' Local Security Bypass Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A local security bypass vulnerability exists in IPPUSBXD. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

openSUSE Security Update : cups-filters (openSUSE-2015-492)

cups-filters was updated to fix three security issues. These security issues were fixed : - CVE-2015-2265: The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allowed remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 mode...

CVE-2015-1158

The addjob function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted 1 IPPCREATEJOB or 2 IPPPRINTJOB...