Lexmark Printers - Command Injection

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. id: CVE-2023-26067 info: name: Lexmark Printers - Command Injection author: DhiyaneshDK severity: high description: | Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. impact: |...

Kyocera Printer d-COPIA253MF - Directory Traversal

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. id: CVE-2020-23575 info: name: Kyocera Printer d-COPIA253MF - Directory Traversal author: 0xAkoko severity: high...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords. Vulnerability Overview Back in 2021 while on a pen test, I was tinkering with Kyocera's thick client application used to...

printerbugnew

शुद्ध RPC over TCP प्रिंटर स्पूलर ट्रिगर विंडोज 11 22H2+ / विंडोज सर्वर 2025 के लिए उपयोग root@kitploit: printerbugnew.py username password domain attackerhost tcpport उदाहरण अनाम कनेक्शन root@kitploit: printerbugnew.py 192.168.1.100 क्रेडेंशियल्स के साथ root@kitploit: printerbugnew.py...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ root@kitploit: Clone...

CVE-2021-43471

CVE-2021-43471 Уязвимость отказа в обслуживании, вызванная несанкционированным доступом к принтерам Canon Затронутый продукт: LBP223 Время: 2021.11.3 Вход в режим системного администратора не требует пароля учетной записи или PIN-кода. Злоумышленник может удаленно выключить устройство после входа...

ZeroPair

ZeroPair Zero-Authentication-Bluetooth-Exploit "Stiehl den Ausdruck, übernimm das System" root@kitploit: ███████╗███████╗██████╗ ██████╗ ╚══███╔╝██╔════╝██╔══██╗██╔═══██╗ ███╔╝ █████╗ ██████╔╝██║ ██║ ███╔╝ ██╔══╝ ██╔══██╗██║ ██║ ███████╗███████╗██║ ██║╚██████╔╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═════╝...

CVE-2026-4480-exploit-poc

Usage: Para login anônimo: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credenciais: python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -...

PSO - Printer Security Offensive

🖨️ PSO - Sicurezza Offensiva per Stampanti Versione 0.4.0 | Registro modifiche "Nmap for Printer" - Strumento di sicurezza offensiva per pentesting su stampanti. Veloce. Mirato. Senza fronzoli. ⚠️ Avviso Legale PSO include funzionalità di valutazione e sfruttamento. Ottenere sempre...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

CVE-2024-47176-Scanner

Quick Start Esempio di utilizzo: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 Scanner per la vulnerabilità CVE-2024-47176 cups-browsed Cos'è CUPS e perché è importante? CUPS Common Unix Printing System è un framework open-source per la gestione e il controllo delle...

CVE-2021-3438

Cosa è incluso? CVE-2021-3438detection v2sccm.ps1 è uno script da eseguire tramite sccm per ottenere un piccolo report sulla vulnerabilità dei dispositivi gestiti. CVE-2021-3438detection.ps1 è uno script da eseguire manualmente o da remoto su un dispositivo gestito. CVE-2021-3438remediation.ps1 è...

RpcAuthnLevelPrivacyEnabled

Verwaltung der Bereitstellung von Änderungen an der RPC-Druckerzuordnung für CVE-2021-1678 KB4599464 Windows-Druckerfreigabefehler, herunterladen und ausführen: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg QUELLENANGABE:...

nmap-printer-nse-scripts

Dieses Repository hat keine README-Datei...

printer-cracktro

printer cracktro Meine Pwn2Own-Einsendungen für Pwn2Own Toronto 2022 zielten auf zwei verschiedene Drucker ab. Einer basiert auf Linux Lexmark und der andere auf DryOS CANON. Nachdem die Software auf dem Drucker geknackt war, zeigten die Einsendungen eine kleine Oldschool-Crack-Intro-Animation, u...

CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP

CVE-2026-8888 – Drucker-Firmware-Update ohne Signatur über HTTP Programmcode Python-HTTP-Server + Drucker-Emulator root@kitploit: !/usr/bin/env python3 printerfirmwareserver.py - Simulated printer that fetches updates over HTTP import requests, hashlib, os FIRMWAREURL =...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

CVE-2026-35163

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

CVE-2026-35163 OctoPrint: XSS in Suppressed Command Notifications

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

EUVD-2026-64043

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...