Kyocera Printer d-COPIA253MF - Directory Traversal

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. id: CVE-2020-23575 info: name: Kyocera Printer d-COPIA253MF - Directory Traversal author: 0xAkoko severity: high...

Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. id: CVE-2022-1026 info: name: Kyocera Net View Address Book Exposure autho...

CVE-2023-49367

CVE-2023-49367 - Exposición de Datos Sensibles Exposición de datos sensibles en el Panel Web de la Impresora Kyocera Fabricante: Kyocera Corporation Versiones Afectadas: Command Center RX - EXOSYS M5521cdn Descripción Después de conectarse a la libreta de direcciones de la interfaz de Kyocera, se...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Une vulnérabilité d'extraction de données non authentifiée dans les imprimantes Kyocera, qui permet la récupération en clair du carnet d'adresses et des mots de passe de domaine. Aperçu de la vulnérabilité En 2021, lors d'un test d'intrusion, je bidouillais l'application...

kyocera-cve-2022-1026_SOAP1.1

Kyocera CVE-2022-1026 SOAP 1.1 仅限授权测试。 本项目仅供教育及防御性验证用途，适用于你拥有或已获得明确测试许可的环境。请勿针对你不拥有或管理的系统使用。 一个关于 CVE-2022-1026 的京瓷打印机暴露检测与数据检索概念验证，专注于 实现 SOAP 1.1 服务的旧款设备 。 漏洞概述 CVE-2022-1026 最初由 ac3lives 在 2021 年的一次渗透测试中发现。原始 PoC 仓库地址： https://github.com/ac3lives/kyocera-cve-2022-1026 2025 年 12...

CVE-2025-63579

CVE-2025-63579 Acceso no autorizado a todos los nombres de usuario y contraseñas introducidos en la función de Agenda de direcciones presente en las impresoras Kyocera Command Center RX. Descripción El uso no autorizado de impresoras Kyocera permite exportar toda la información almacenada en la...

kygocera

kygocera CVE-2022-1026 Versión mejorada en Golang del PoC de Rapid7 para CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ créditos a Aaron Herndon / https://twitter.com/ac3lives saludos a https://github.com/D4RKMATT3R CVE-2022-1026...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Basado en el exploit original de Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ Créditos para Aaron Herndon / https://twitter.com/ac3lives /...

EUVD-2025-210448

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

CVE-2025-63579 affects Kyocera devices using Command Center RX for various TASKalfa models (e.g., 2552ci, 3252ci, 2553ci, 3253ci, 3554ci, 4052ci, 5052ci, 6052ci, 7052ci, 8052ci, 7353ci, 8353ci, 2554ci, 3254ci, 505). The description reports that unauthorized access can export all information store...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer

KyoceraCredsDump - CVE-2022-1026 - Based on the original explo...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

CVE-2022-50932 affects Kyocera Command Center RX ECOSYS M2035dn. A directory traversal flaw on the /js/ path allows unauthenticated attackers to read sensitive files (e.g., /etc/passwd, /etc/shadow) by crafting traversal strings (including null-byte variants). Reported exploitation exists (e.g., ...