CVE-2023-27350

CVE-2023-27350 익스플로잇 PoC 이는 PaperCut MF/NG에서 발견된 취약점 CVE-2023-27350에 대한 개념 증명PoC 익스플로잇입니다. 인증되지 않은 공격자가 SYSTEM 권한으로 임의 코드를 실행할 수 있게 합니다. 요구 사항 이 익스플로잇을 사용하기 전에 다음 라이브러리가 설치되어 있는지 확인하십시오: pip install -r requirements.txt 사용법 python CVE-2023-27350.py -u -c | --reverse-shell | -f 옵션 -u, --url: 대상...

CVE-2023-27350

CVE-2023-27350 CVE-2023-27350에 영향을 받는 PaperCut MF/NG를 위한 POC 기술적 분석 취약점의 기술적 근본 원인 분석, 침해 지표, 인터넷 노출 현황은 당사 블로그에서 확인할 수 있습니다: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise 요약 이 POC는 인증 우회 취약점과 내장 스크립팅 기능 악용을 연쇄적으로 사용하여 코드를 실행합니다. 사용법 python3...

CVE-2023-27350-POC

CVE-2023-27350-POC 설명: 이 도구는 PaperCut MF/NG 버전 8.0 이상, 20.1.7, 21.2.11 또는 22.0.9 미만의 버전에서 인증 우회 취약점을 악용하도록 설계되었습니다. 이 취약점은 시스템에 대한 무단 접근을 허용하며 잠재적으로 악의적인 목적으로 사용될 수 있습니다. 설치: 1. git clone https://github.com/TamingSariMY/CVE-2023-27350-POC.git 2. pip install pyfiglet 사용법: 1. python3 vuln.py 2. IP...

CVE-2023-27350

CVE-2023-27350 PaperCut MF/NG에 영향을 미치는 CVE-2023-27350에 대한 POC Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' 요약 이 POC는 인증 우회 취약점을 내장 스크립팅 기능의 악용과 연계하여 코드를 실행합니다. 사용법 python3 CVE-2023-27350.py --url 'http://10.0.40.56:9191' --command...

CVE-2023-27350-POC

CVE-2023-27350-POC PaperCut MF/NG의 취약한 버전을 검색하는 파이썬 스크립트입니다. 자세한 정보는 여기에서 확인할 수 있습니다: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software 참고: 이 도구는 교육용으로만 제작되었습니다. 사용에 따른 책임은 본인에게 있습니다...

CVE-2023-27350-PoC

CVE-2023-27350 이 PoC는 PaperCut MF/NG 버전 8.0부터 20.1.7, 21.2.11, 22.0.9 미만까지의 인증을 우회하는 방법을 보여줍니다. 유효한 로그인 자격 증명 없이 시스템과 상호작용할 수 있습니다. Shodan 검색어 1. http.html:"papercut" 2. http.html:"papercut" port:9191 3. http.title:"PaperCut Login" 사용 방법 python cve-2023-27350.py 127.0.0.1...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-82077

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

EUVD-2026-85812

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. Because user permissions are not evaluated during this process, an attacker can submit report generation requests without valid credentials. This flaw allows for the...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

EUVD-2026-85811

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

PT-2026-97724

Name of the Vulnerable Software and Affected Versions PaperCut MF/NG affected versions not specified Description An improper authentication issue allows an unauthenticated remote attacker to trigger report generation. By submitting requests without valid credentials, an attacker can generate...

PT-2026-97723

Name of the Vulnerable Software and Affected Versions PaperCut NG affected versions not specified PaperCut MF affected versions not specified Description A path traversal issue exists in the Scan-to-Fax component, where improper limitation of a pathname to a restricted directory allows an...

CVE-2026-82077: Improper Limitation of a Pathname to a Restricted Directory

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

CVE-2026-87739: Authorization Bypass Through User-Controlled Key

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

The vulnerability in the web interface for controlling printing control software in PaperCut MF and PaperCut NG allows a perpetrator to gain access to read and modify data.

The vulnerability in the web-based interface for controlling printing control software in PaperCut MF and PaperCut NG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain read-only access and modify data...

The vulnerability of the printing control software in PaperCut MF and PaperCut NG, related to insecure dynamic class loading, allows a violator to execute arbitrary code.

The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's...