CVE-2023-26067

CVE-2023-34362 POC: Lexmark 프린터에 영향을 미치는 명령 주입 취약점CVE-2023-26067을 악용한 자격 증명 덤프, 리버스 셸 및 음악 재생 도구 기술 분석 취약점에 대한 기술적 근본 원인 분석은 블로그에서 확인할 수 있습니다. https://www.horizon3.ai/lexmark-command-injection-vulnerability-zdi-can-19470-pwn2own-toronto-2022 요약 이 POC는 명령 주입을 악용하여 httpd 사용자로 셸을 획득합니다. AD 서비스 자격 증명...

Brother Printers – Authentication Bypass via Default Admin Password

By leaking a target device's serial number, a remote attacker can generate the target device's default administrator password. The target device may leak its serial number via unauthenticated HTTP, HTTPS, IPP, SNMP, or PJL requests. id: CVE-2024-51978 info: name: Brother Printers – Authentication...

lexmark

Lexmark プリンタ関連のあれこれ このリポジトリには、私が公開してきたLexmarkプリンタ関連のすべての作業が含まれています。 おそらく、ほとんどの方はファームウェア復号ユーティリティを目当てに来ているでしょう。tools フォルダを確認してください。 exploit フォルダには、私が開発した当時は0dayだったエクスプロイトが含まれています。これは、100種類以上のLexmarkプリンタモデルに影響を与えたようです。 このエクスプロイトは元々Pwn2Own Toronto...

Sharp Multifunction Printers - Cookie Exposure

It was observed that Sharp printers are vulnerable to a listing of session cookies without authentication. Any attacker can list valid cookies by visiting a backdoor webpage and use them to authenticate to the printers. id: CVE-2024-33610 info: name: Sharp Multifunction Printers - Cookie Exposure...

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

SIGINT_THROUGH_BROTHER_PRINTERS

SIGINTTHROUGHBROTHERPRINTERS 취약한 프린터를 통해 데이터를 수집하는 제 툴킷입니다. 초기 접근 수단으로 cve 2017-7588을 사용하며, 커스텀 펌웨어용 임플란트를 개발해야 합니다. 아마 언젠가 사이버 공격을 시뮬레이션하는 데 사용할 것입니다...

CVE-2026-39047

PrintHack - プリンタセキュリティテストツール | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 免責事項 : このツールは正当なセキュリティテスト および教育目的のみ を意図しています。所有しているシステム、または明示的なテスト許可を得たシステムでのみ責任を持って使用してください。 🎯 機能 コア機能 🔌 生ソケット印刷 - ポート9100を介したプリンタとの直接通信 📄 PCLペイロード配信 - Printer Command Languageペイロードの送信 🖼️ 画像外部送信マーカー -...

CVE-2024-58388

Sharp and Toshiba Tec rebranded multifunction printers are vulnerable to an unauthenticated local file inclusion (LFI) vulnerability. The root cause is the lack of input validation on the path parameter within the installed_emanual_down.html endpoint. Remote attackers can leverage directory trave...

EUVD-2024-55780

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2024-58388 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...

CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...

EUVD-2026-90549

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...

CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers , including Apeos C4571 (version 1.1.3 and earlier) and Apeos C3567 (version 1.1.3). The root cause is the insecure handling of externally supplied parameters , which may allow a s...

PT-2026-103873

Name of the Vulnerable Software and Affected Versions Sharp and Toshiba Tec rebranded multifunction printers affected versions not specified Description An unauthenticated local file inclusion issue exists, allowing remote attackers to read arbitrary files. By manipulating the path parameter in t...

VulnCheck KEV: CVE-2024-58388

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers – Potential Denial of Service

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers may be potentially vulnerable to a Denial of Service due to race conditions when the Android kernel used by HP Workpath Applications is exploited. Disable Workpath Platform via the EWS or Fleet Management Tool...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, there was a use-after-free vulnerability in the CUPS scheduler cupsd when temporary printers were automatically deleted. The cupsdDeleteTemporaryPrinters function i...

Astra Linux – Vulnerability in cups-filters

“cups-filters” contains backends, filters, and other software required to make the cups printing service work on operating systems other than macOS. If you use the Backend Error Handler beh to create an accessible network printer, this security vulnerability can lead to remote code execution. The...

CVE-2026-73542: Improper Following of a Certificate's Chain of Trust

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...