Code injection

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors...

[security bulletin] HPSBPI02828 SSRT100778 rev.1 - HP LaserJet and Color LaserJet, Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03556108 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03556108 Version: 1 HPSBPI02828...

Print of one malicious document can expose your whole LAN

Print of one malicious document can expose your whole LAN This year at Chaos Communications Congress 28C3 Ang Cui presents Print Me If You Dare, in which he explained how he reverse-engineered the firmware-update process for HPs hundreds of millions of printers and In Andrei Costin's presentation...

HP Facing Class Action Suit For Not Disclosing Printer Vulnerability

A class action lawsuit filed in U.S. District Court in California against Hewlett-Packard could have wide ranging implications for software makers, should the court agree with the plaintiff’s claim that the company violated the state’s consumer protection laws by failing to disclose a serious...

Virata EmWeb R6.0.1 - Remote Crash

Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -...

CentOS Update for ghostscript CESA-2008:0155 centos4 i386

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2008:0155 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

NEC MultiWriter 1700C/7500C FTP server vulnerability

Overview NEC printers contain a vulnerability which allow connection to external FTP servers via the printer's internal FTP server. Although the printer's FTP server can connect to a target FTP server, it cannot send files to a target FTP server. Impact A remote attacker could possibly conduct a...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

PT-2008-2007 · Oki · Oki C5510Mfp Printer

Name of the Vulnerable Software and Affected Versions: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 Description: The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration...

7 php scripts File Inclusion / Source disclosure Vuln

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

CVE-2004-2166

CVE-2004-2166 affects Canon ImageRUNNER (iR) 5000i and C3200 printers, where the print-from-email feature can be abused when IP range filtering is not used. A remote attacker can send a text/plain email to TCP port 25 and cause the device to print arbitrary text without authentication. The issue ...

RICOH Aficio DoS

Printer reboots on malcrafted ICMP packet...

Ricoh Aficio 450455 PCL Printer - Remote ICMP Denial of Service

Ricoh Aficio 450455 PCL Printer - Remote ICMP Denial of Service // source: https://www.securityfocus.com/bid/11932/info It is reported that Ricoh 450/455 printers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the device to properly handle exception...

Ricoh Aficio 450/455 PCL Printer - Remote ICMP Denial of Service

// source: https://www.securityfocus.com/bid/11932/info It is reported that Ricoh 450/455 printers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the device to properly handle exceptional ICMP packets. Remote attackers may exploit this vulnerability...

[SA12397] Samba Printer Change Notification Request Denial of Service Vulnerability

TITLE: Samba Printer Change Notification Request Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12397 VERIFY ADVISORY: http://secunia.com/advisories/12397/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Samba 2.x http://secunia.com/product/1271/ DESCRIPTION: A...

HP JetDirect Printer - SNMP JetAdmin Device Password Disclosure

HP JetDirect J2552A/J2552B/J2591A/J3110A/J3111A/J3113A/J3263A/300.0 X Printer SNMP JetAdmin Device Password Disclosure Vulnerability source: https://www.securityfocus.com/bid/7001/info A problem with JetDirect printers could make it possible for a remote user to gain administrative access to the...

phenoelit advisory, Brother Printers ++/-

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +-++ Authors FX [email protected] FtR [email protected] kim0 [email protected] DasIch [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/BrotherNC.txt Affected Products Brother Corporation NC-3100...

CVE-2001-1177

ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Tektronix PhaserLink Multiple Admin Page Unauthenticated Configuration Manipulation

The file /nclitems.shtml or /nclsubjects.shtml exists on the remote web server. If the remote host is a Tektronix printer, then this page allows anyone to reconfigure it without any authentication means whatsoever. An attacker may use this flaw to conduct a denial of service attack against your...

Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW)

Summary - New Tektronix Xerox printers have covered up a security through obscurity flaw discovered in November, 1999 with more security through obscurity. The unauthenticated and unfiltered administrator configuration page on the PhaserLink webserver is now located at the URL...