Lucene search
+L

376 matches found

ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.6 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.6AI score0.01707EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/22 8:15 p.m.25 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS0.01707EPSS
SaveExploits0References2
EUVD
EUVD
added 2024/11/22 8:04 p.m.10 views

EUVD-2023-43193

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.4AI score0.01707EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/22 8:04 p.m.66 views

CVE-2023-39470

CVE-2023-39470 concerns PaperCut NG, where the vulnerability lies in the management of the print.script.sandboxed setting. The exposed dangerous function can let an attacker execute code with SYSTEM privileges after authenticating, resulting in remote code execution. Affected product: PaperCut NG...

7.2CVSS7.5AI score0.01707EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:04 p.m.32 views

CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.9AI score0.01707EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/22 8:04 p.m.37 views

CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS0.01707EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/22 12:00 a.m.13 views

PaperCut NG 安全漏洞

PaperCut NG is a printer control software from PaperCut, Inc. A security vulnerability exists in PaperCut NG that stems from the exposure of a dangerous function with a remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affected installation...

7.2CVSS7.6AI score0.01707EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.24 views

PaperCut NG < 23.0.9 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

7.8CVSS7AI score0.00406EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.12 views

PaperCut MF < 23.0.9 Multiple Vulnerabilities

The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

7.8CVSS6AI score0.00406EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:00 a.m.16 views

The vulnerability of the web printing function in the control systems for printing in PaperCut MF and PaperCut NG allows a violator to trigger a service failure.

The vulnerability of the web printing function in the control tools for printing in PaperCut MF and PaperCut NG is related to the failure to implement measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker to cause servic...

5.5CVSS6.3AI score0.00241EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:00 a.m.17 views

The vulnerability of the printing control software in PaperCut MF and PaperCut NG lies in the incorrect definition of the link before accessing a file, allowing a violator to delete arbitrary data.

The vulnerability of the printing control software in PaperCut MF and PaperCut NG is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a perpetrator to delete arbitrary data...

7.8CVSS7.3AI score0.00385EPSS
SaveExploits0References5Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2024/10/02 12:00 a.m.27 views

PaperCut NG pc-web-print Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of PaperCut NG. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS6.5AI score0.00241EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/27 6:56 p.m.5 views

Malicious code in papercut-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7136f3baafe0f0e034503c19de9df0b9dcbb5c556c1ad38c56fb8e01b82d08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/09/27 6:56 p.m.7 views

MAL-2024-9007 Malicious code in papercut-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7136f3baafe0f0e034503c19de9df0b9dcbb5c556c1ad38c56fb8e01b82d08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2024/09/26 2:15 a.m.34 views

CVE-2024-8405

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be us...

6.1CVSS0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/26 2:15 a.m.14 views

CVE-2024-8405

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be us...

5.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/26 2:15 a.m.11 views

CVE-2024-8404

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

7.8CVSS5.9AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/26 2:15 a.m.26 views

CVE-2024-8404

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

7.8CVSS0.00385EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/26 1:42 a.m.35 views

CVE-2024-8404 Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

7.8CVSS7.4AI score0.00385EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/26 1:42 a.m.98 views

CVE-2024-8404

CVE-2024-8404 describes an arbitrary file deletion vulnerability in PaperCut NG/MF on Windows servers with Web Print enabled. An attacker must have local login access and be able to run low-privilege code via the web-print-hot-folder to delete targeted files. The issue is tied to a split from CVE...

7.8CVSS7.4AI score0.00385EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder