printerbugnew

基于 TCP 的纯 RPC 打印机后台处理程序触发 适用于 Windows 11 22H2+ / Windows Server 2025 用法 root@kitploit: printerbugnew.py username password domain attackerhost tcpport 示例 匿名连接 root@kitploit: printerbugnew.py 192.168.1.100 使用凭据 root@kitploit: printerbugnew.py 192.168.1.100 admin Password123 DOMAIN 触发回连到其他主机（攻击者）...

CVE-2022-30206

CVE-2022-30206 这是 CVE-2022-30206 的 PoC。 简介 执行以下操作可实现任意文件删除： 1. 运行 addprinter.exe 创建一个打印机，并将 SpoolDirectory 设置为 C:\Users\Public\tmp\1。 2. 运行 FileLock.exe TargetFile 将 .SHD 文件重定向到 TargetFile，并在 TargetFile 上设置 oplock。 3. 运行 openprinter.exe 使打印机工作，这将触发 oplock；随后释放 oplock，TargetFile 将被删除。 备注 1. 此 PoC...

CVE-2021-1675

漏洞说明 打印机后台处理程序是一种管理打印队列的 Windows 服务。它接收用户提交的作业，将其转换为打印机可理解的格式，并在打印机可用时发送。该服务以系统服务（spoolsv.exe）的形式运行，拥有高权限，因此成为攻击的常见目标，例如 PrintNightmare 漏洞。 如何利用 当攻击者尝试远程利用打印后台处理程序，以检查主机是否易受 PrintNightmare 漏洞影响时，可以使用名为 rpcdump.py 的工具，该工具是 Impacket 包的一部分，这是一组在渗透测试环境中广泛使用的工具。 root@kitploit: ❯ rpcdump.py @10.10.188....

KB5078775: Windows Server 2012 Security Update (March 2026)

The remote Windows host is missing security update 5078775. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network. CVE-2026-23669 - Use after free in Windows Win32K allows an...

SUSE CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Researcher Uncovers Yet Another Unpatched Windows Printer Spooler Vulnerability

Merely days after Microsoft sounded the alarm on an unpatched security vulnerability in the Windows Print Spooler service, possibly yet another zero-day flaw in the same component has come to light, making it the fourth printer-related shortcoming to be discovered in recent weeks. "Microsoft...

Vulnerability found in Microsoft Printer Spooler service

Microsoft has found a vulnerability in the Printer Spooler service. A local malicious person with the ability to execute code under user privileges to execute code could potentially exploit it to execute arbitrary code under SYSTEM privileges. It is as yet unknown in which versions of Windows the...

Exploit for CVE-2021-1675

From Lares Labs: Detection & Remedia...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2021-1379)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local...

Experts Detail A Recent Remotely Exploitable Windows Vulnerability

More details have emerged about a security feature bypass vulnerability in Windows NT LAN Manager NTLM that was addressed by Microsoft as part of its monthly Patch Tuesday updates earlier this month. The flaw, tracked as CVE-2021-1678 CVSS score 4.3, was described as a "remotely exploitable" bug...

EulerOS Virtualization for ARM 64 3.0.6.0 : cups (EulerOS-SA-2020-1704)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local...

EulerOS 2.0 SP8 : cups (EulerOS-SA-2020-1501)

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2020-1501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2047-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2047-1] cups security update

Package : cups Version : 1.7.5-11+deb8u7 CVE ID : CVE-2019-2228 An issue has been found in cups, the Common UNIX Printing Systemtm. An incorrect bounds check could lead to a possible out-of-bounds read and local information disclosure in the printer spooler. For Debian 8 "Jessie", this problem ha...

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

DEBIAN-CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

UBUNTU-CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...