CVE-2021-1675

Explicación de la vulnerabilidad El Administrador de colas de impresión Printer Spooler es un servicio de Windows que gestiona las colas de impresión. Recibe trabajos enviados por el usuario, los convierte a un formato que la impresora entiende y los envía cuando la impresora está disponible. Se...

CVE-2021-3438

CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...

printix-CVE-2022-29551

CVE-2022-29551 Lanzamiento Simple | Versión para imprimir Una vulnerabilidad de "Método o función peligrosa expuesta" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, versión 1.3.1156.0 y anteriores, permite a un atacante local o remoto la capacidad de instalar...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR related to CVE-2020-1048 Details Author: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC date: 2010-xx-xx Release date: 2020-05-14 reminded/inspired by CVE-2020-1048 - yes, I am too...

CVE-2024-47176

CUPS Browsd daemon which is by default running as root if allowed in Linux/Unix systems, allow remote connections from any device on the network to create a new printer. Start the python post server and then send the request to add the printer you will se a connection to your http server as root ...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Exploit LPE simple de CVE-2021-1675 Uso root@kitploit: CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,es un DLL de prueba que creará C:\test.txt si tiene éxito. Aviso 1. Añadir EnumPrinterDriversW para obtener pDriverPath, así que no necesitamos cambiar la "ruta del...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

CVE-2023-22960

PoC für CVE-2023-22960 Details PoC für CVE-2023-22960, den ich entdeckt habe. Diese Schwachstelle ermöglicht es einem Angreifer, den Brute-Force-Präventionsmechanismus für Anmeldeinformationen der Embedded Web Server-Schnittstelle aller Lexmark-Druckermodelle mit einer Firmware-Version vor 01/202...

concealed_position

Posizione Nascosta Posizione Nascosta è un attacco di escalation dei privilegi locale contro Windows che utilizza il concetto di "Bring Your Own Vulnerability". Nello specifico, Posizione Nascosta CP sfrutta la logica as designed di pacchetto e stampa punto a punto in Windows che consente a un...

BrotherVulnerabilities

Più dispositivi Brother: Vulnerabilità Multiple Panoramica Rapid7 ha condotto un progetto di ricerca zero-day su stampanti multifunzione MFP di Brother Industries, Ltd. Questa ricerca ha portato alla scoperta di otto nuove vulnerabilità. Alcune o tutte queste vulnerabilità sono state identificate...

canon-tools

canon-tools Ferramentas usadas para descriptografar firmwares de impressoras Canon PIXMA. Para mais informações sobre o contexto, consulte a seguinte publicação no blog: https://synacktiv.com/publications/treasure-chest-party-quest-from-doom-to-exploit Referências Este trabalho foi inspirado pela...

PRETty

PRETty "PRinter Exploitation Toolkit" LAN-Automatisierungswerkzeug Es ist nur ein Python-Wrapper für PRET... eigentlich ist es nur eine for-Schleife PRETty ist nützlich, wenn eine große Anzahl von Druckern in einem Netzwerk vorhanden ist. Anstatt jede einzelnen Drucker zu scannen, zu protokollier...

CVE-2016-3238-PoC

CVE-2016-3238-PoC Whitepaper für CVE-2016-3238/MS16-087 Proof of Concept. CVE-2016-3238 ermöglicht es Man-in-the-Middle-Angreifern, beliebigen Code auszuführen, indem während der Druckerinstallation ein manipulierte Druckertreiber bereitgestellt wird. Diese Sicherheitslücke wird auch als „Windows...

CVE-2024-34329

CVE-2024-34329 Produto Testado: Datacard XPS Card Printer Driver Versão: = 8.4 Descrição: O aplicativo é propenso a uma vulnerabilidade de Escalação de Privilégio Local LPE devido a permissões inseguras de arquivo/pasta em sua instalação padrão, pela qual concede a todos os direitos de controle...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 1. Juni 2021 CVE-2021-1675 ist eine kritische Schwachstelle für Remote-Codeausführung und lokale Privilegienausweitung, die als "PrintNightmare" bezeichnet wird. Proof-of-Concept-Exploits wurden veröffentlicht Python, C+...

PRET

PRET - Kit de Exploração de Impressoras A sua impressora está segura? Verifique antes que alguém o faça... O PRET é uma nova ferramenta para testes de segurança de impressoras desenvolvida no âmbito de uma Dissertação de Mestrado na Universidade de Ruhr Bochum. Conecta-se a um dispositivo via red...

Honeywell PM43 Printers - Command Injection

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006 id:...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

Kyocera Printer d-COPIA253MF - Directory Traversal

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. id: CVE-2020-23575 info: name: Kyocera Printer d-COPIA253MF - Directory Traversal author: 0xAkoko severity: high...

Lexmark Printers - Command Injection

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. id: CVE-2023-26067 info: name: Lexmark Printers - Command Injection author: DhiyaneshDK severity: high description: | Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. impact: |...