PRET

PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF 미리보기 익스플로잇 PoC 이 익스플로잇은 PostScript 출력이 반영되지 않지만 png 이미지를 통한 PDF 미리보기 등으로 실행되는 GS 환경에서 CVE-2019-14811을 대상으로 합니다. 익스플로잇은 pngXXm 미리보기에서 직접 명령을 렌더링하며, https://github.com/hhc0null/GhostRule/blob/master/ghostrule1.ps 을 기반으로 합니다. dSafer 플래그는 .pdfhookDSCCreator를 통한 .forcepu...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 CVE-2023-43115 이해를 돕기 위한 간단한 예제와 함께 작성된 소개 글입니다. !WARNING 저는 주로 문제를 이해하고 사이버 보안에 대해 배우기 위해 이 글을 작성했습니다. 따라서 오류가 있을 수 있습니다. 문제 IJS 장치Improved Inkjet Printing를 활용하려면 Ghostscript가 IJS 서버를 시작해야 합니다. 이는 IjsServer 매개변수에 지정된 경로를 사용하여 수행됩니다. IjsServer 매개변수는 파일 시스템 내의 원하는 파일을...

PIL-RCE-Ghostscript-CVE-2018-16509

Удаленное выполнение команд через Ghostscript в Python PIL/Pillow CVE-2018-16509 Вдохновлено https://github.com/ysrc/PIL-RCE-By-GhostButt PIL/Pillow RCE через CVE-2017-8291. В этой среде Docker используется более новая версия Ghostscript v9.23 и новый эксплойт CVE-2018-16509. Ghostscript — это...

CVE-2017-0261

CVE-2017-0261 и анализ образца эксплойта 0x01 Описание уязвимости Причина: при открытии документа Office, FLTLDR.EXE используется для отображения встроенного EPS-файла, содержащего уязвимость. Этот файл написан на языке PostScript и может быть использован атакующим с помощью операции...

CVE-2018-16509

CVE-2018-16509 Docker 플레이그라운드 "Artifex Ghostscript 9.24 이전 버전에서 문제가 발견되었습니다. /invalidaccess 예외 처리 중 "권한 복원" 검사가 잘못되어, 조작된 PostScript를 공급할 수 있는 공격자가 "pipe" 명령을 사용하여 코드를 실행할 수 있습니다." https://nvd.nist.gov/vuln/detail/CVE-2018-16509 https://access.redhat.com/security/cve/cve-2018-16509 빌드...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow prior to version 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to handle any combination of \r and \n as line endings. This implementation uses a quadratic method of accumulating lines while searching for a line ending. A malicious EPS...

Astra Linux – Vulnerability in cups

Due to a failure in validating the length provided by a PPD PostScript document crafted by an attacker, CUPS and libppd are vulnerable to a heap-based buffer overflow, potentially leading to code execution. This issue has been fixed in CUPS version 2.4.7, released in September 2023...

Astra Linux – Vulnerability in GhostScript

In Artifex Ghostscript version 10.01.2, the gdevijs.c file in GhostPDL can lead to remote code execution through crafted PostScript documents. This occurs because the IJS device can be switched, or the IjsServer parameter can be changed, after SAFER has been activated. NOTE: It is a documented ri...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

Astra Linux – Vulnerability in GhostScript

In Artifex Ghostscript version 10.01.0, there is a buffer overflow that may lead to corruption of data within the PostScript interpreter, specifically in the bcp/sbcp.c file. This issue affects functions such as BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled just...

Linux Distros Unpatched Vulnerability : CVE-2026-65640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick...

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

DEBIAN-CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

CVE-2026-65640

Affected: WordPress core

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

PT-2026-71974

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.4 Description An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and...

MiracleLinux 9 : cups-2.3.3op2-39.el9_8 (AXSA:2026-1504:10)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1504:10 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has...

JLSEC-2026-947 ImageMagick: Code Injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...