191 matches found
CVE-2023-27350
CVE-2023-27350 Diese Schwachstelle ermöglicht es entfernten Angreifern, die Authentifizierung bei betroffenen Installationen von PaperCut NG 22.0.5 Build 63914 zu umgehen. Für die Ausnutzung dieser Schwachstelle ist keine Authentifizierung erforderlich. Die spezifische Schwachstelle besteht in de...
CVE-2026-8793
CVE-2026-8793 — Protezione brute-force mancante nel modulo di accesso di PaperCut NG Campo| Dettagli ---|--- ID CVE| CVE-2026-8793 Prodotto| PaperCut NG Versione interessata| 25.0.11 Build 75758 e precedenti CWE| CWE-307 — Limitazione impropria dei tentativi di autenticazione eccessivi Punteggio...
CVE-2023-27350
PaperCut NG/MG RCE CVE-2023-27350 Un exploit Bash semplificato per CVE-2023-27350. Questo script automatizza il bypass dell'autenticazione, la preparazione dell'ambiente e l'iniezione di comandi tramite il motore di scripting della stampante PaperCut. Prova visiva RCE di base: Attivazione di una...
PaperCut-Authentication_Bypass_and_RCE
CVE-2023-27350 — Bypass di Autenticazione e RCE su PaperCut NG/MF Exploit Python standalone per la vulnerabilità critica di bypass dell'autenticazione e esecuzione remota di codice in PaperCut NG/MF. CVSS 9.8. Descrizione CVE-2023-27350 colpisce PaperCut NG e MF nelle versioni precedenti a 20.1.7...
PaperCut NG - Authentication Bypass
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...
CVE-2026-8794
CVE-2026-8794 — Enumerazione degli Username tramite Canale Laterale di Temporizzazione nell'Autenticazione di PaperCut NG Campo| Dettagli ---|--- ID CVE| CVE-2026-8794 Prodotto| PaperCut NG Versione interessata| 25.0.11 Build 75758 e precedenti CWE| CWE-208 — Discrepanza di Temporizzazione...
CVE-2026-8793
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanis...
CVE-2026-8794
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a...
PaperCut NG < 25.0.11 Path Traversal (CVE-2026-6418)
The version of PaperCut NG installed on the remote Windows host is prior to 25.0.11. It is, therefore, affected by a vulnerability: - A path traversal vulnerability exists in the Shared Account Synchronization component of PaperCut NG/MF. Due to a lack of proper path validation and sanitization, ...
PaperCut NG < 25.0.10 XSS (CVE-2026-4794)
The version of PaperCut NG installed on the remote Windows host is prior to 25.0.10. It is, therefore, affected by a vulnerability: - Multiple cross-site scripting XSS vulnerabilities allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This...
CVE-2026-5115 Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
The PaperCut NG/MF specifically, the embedded application for Konica Minolta devices is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the...
CVE-2026-4794
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
CVE-2026-4794
PaperCut NG/MF prior to version 25.0.10 is affected by multiple XSS vulnerabilities in various UI fields that can be exploited by authenticated administrators to inject scripts or HTML, potentially compromising other admins’ sessions or performing actions within the admin context. A fix is availa...
CVE-2026-4794 Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
PaperCut NG/MF 安全漏洞
PaperCut NG/MF is a printing management system developed by PaperCut Corporation. Versions of PaperCut NG/MF prior to 25.0.10 contained security vulnerabilities. These vulnerabilities stemmed from cross-site scripting vulnerabilities in multiple UI fields, which could allow for the injection of...
PaperCut NG/MF 安全漏洞
PaperCut NG/MF is a printing management system developed by PaperCut Corporation. There is a security vulnerability in PaperCut NG/MF. This vulnerability stems from an insecure communication channel between the embedded application and the server, which could lead to data leaks. These leaked data...
PT-2026-29169
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
CVE-2023-31046
A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...
CVE-2023-4568
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...
