CVE-2023-27350

CVE-2023-27350 Эксплойт POC Это эксплойт Proof of Concept POC для CVE-2023-27350, уязвимости, обнаруженной в PaperCut MF/NG, которая позволяет неавторизованному злоумышленнику выполнять произвольный код с привилегиями SYSTEM. Требования Перед использованием этого эксплойта убедитесь, что вы...

CVE-2023-27350

CVE-2023-27350 POC для CVE-2023-27350, затрагивающей PaperCut MF/NG Технический анализ Технический анализ первопричины уязвимости, индикаторы компрометации и информация о распространении в интернете доступны в нашем блоге:...

CVE-2023-27350-POC

CVE-2023-27350-POC Описание: Этот инструмент предназначен для эксплуатации уязвимости обхода аутентификации в PaperCut MF/NG версий 8.0 и выше, но до версий 20.1.7, 21.2.11 или 22.0.9. Уязвимость позволяет неавторизованный доступ к системе и может потенциально использоваться в злонамеренных целях...

CVE-2023-27350

CVE-2023-27350 PoC для CVE-2023-27350, затрагивающей PaperCut MF/NG Затронутые версии: «PaperCut MF или NG версии 8.0 или новее за исключением пропатченных версий на всех платформах ОС.» Краткое описание Этот PoC использует уязвимость обхода аутентификации в сочетании с abuse встроенного...

CVE-2023-27350-POC

CVE-2023-27350-POC Python-скрипт, который ищет уязвимую версию PaperCut MF/NG Дополнительная информация доступна здесь: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software Примечание: Этот скрипт создан только для образовательных целей. Используйте на свой...

CVE-2023-27350-PoC

CVE-2023-27350 Данный PoC демонстрирует возможность обхода аутентификации в PaperCut MF/NG версий от 8.0 до, но не включая, 20.1.7, 21.2.11 и 22.0.9. Он позволяет взаимодействовать с системой без использования действительных учётных данных. Поисковые запросы Shodan 1. http.html:"papercut" 2...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-82077

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

EUVD-2026-85812

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. Because user permissions are not evaluated during this process, an attacker can submit report generation requests without valid credentials. This flaw allows for the...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

EUVD-2026-85811

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

PT-2026-97724

Name of the Vulnerable Software and Affected Versions PaperCut MF/NG affected versions not specified Description An improper authentication issue allows an unauthenticated remote attacker to trigger report generation. By submitting requests without valid credentials, an attacker can generate...

PT-2026-97723

Name of the Vulnerable Software and Affected Versions PaperCut NG affected versions not specified PaperCut MF affected versions not specified Description A path traversal issue exists in the Scan-to-Fax component, where improper limitation of a pathname to a restricted directory allows an...

CVE-2026-82077: Improper Limitation of a Pathname to a Restricted Directory

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

CVE-2026-87739: Authorization Bypass Through User-Controlled Key

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

The vulnerability in the web interface for controlling printing control software in PaperCut MF and PaperCut NG allows a perpetrator to gain access to read and modify data.

The vulnerability in the web-based interface for controlling printing control software in PaperCut MF and PaperCut NG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain read-only access and modify data...

The vulnerability of the printing control software in PaperCut MF and PaperCut NG, related to insecure dynamic class loading, allows a violator to execute arbitrary code.

The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's...