112 matches found
CVE-2026-91079
Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...
CVE-2026-91079
Huly Platform through 0.7.426 is affected by a server-side request forgery (SSRF) vulnerability in its print service . The root cause is a missing hostname allowlist validation : authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns a...
CVE-2026-91079 Huly Platform through 0.7.426 SSRF via Print Service
Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...
EUVD-2026-77714
Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...
CVE-2021-1675
CVE-2021-1675 CVE-2021-1675:Windows 打印机服务中的零日漏洞,所有操作系统版本均存在可利用的漏洞。 让我提供一种我找到的缓解方法,在等待微软发布官方补丁期间。 在 Windows Powershell 中以管理员身份运行 注意:Servers.txt 包含你域中的所有服务器,排除安装了打印服务器角色的服务器。 $server= Get-Content C:\Script\Servers.txt Stop-Service -InputObject $Get-Service -Computer $server -Name spooler Set-Servic...
PrintNightmare
TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 Tarea 6 Detección: Registros de eventos de Windows Visor de eventos Registros de aplicaciones y servicios Microsoft Windows PrintService Admin...
Samba Print Exposure Auditor
This is an exposure assessment tool designed to evaluate whether a Samba print service exposes printer-related RPC functionality to anonymous users through the spoolss endpoint...
CVE-2025-65417
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
CVE-2025-65415
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...
CVE-2026-3291
Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities...
EUVD-2025-209775
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php...
EUVD-2025-209777
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
EUVD-2025-209776
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
EUVD-2025-209774
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...
CVE-2025-65416
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php...
CVE-2025-65418
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
CVE-2025-65415
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...
CVE-2025-65417
CVE-2025-65417 affects the docuFORM Managed Print Service Client 11.11c. Affected component: login page, vulnerable to a reflected cross-site scripting (XSS) attack. Underlying cause and impact are described in the provided metrics: CVSS 3.1 base score 6.1 (Medium), vector AV:N/AC:L/PR:N/UI:R/S:C...
PT-2026-39613
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php...
CVE-2025-65418
CVE-2025-65418 affects docuFORM Managed Print Service Client 11.11c. It is a directory traversal vulnerability that allows reading arbitrary files via a crafted URL. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). Multiple connected sources corroborate...