CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...

CVE-2026-4480-POC

CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS Detailed vulnerability analysis and exploit writing process have been published on Security Guest: http://bobao.360.cn/learning/detail/3644.html In the C Exploit, there is one missing printf to print the final color array. You can add it manually or directly use debug...

GHSA-65HG-CF3F-5M39 Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

Impact When the HTML text parser cannot obtain a document from DOMParser because the call throws, it falls back to assigning the raw markup to the innerHTML of an element created in the hosting document, and the allow-list is applied only to the resulting DOM afterwards. In Chromium the Trusted...

Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

Impact When the HTML text parser cannot obtain a document from DOMParser because the call throws, it falls back to assigning the raw markup to the innerHTML of an element created in the hosting document, and the allow-list is applied only to the resulting DOM afterwards. In Chromium the Trusted...

npm: Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

npm: Highcharts Core: HTML text parsing falls back to unfiltered innerHTML during printing vulnerability discovered by ? in WordPress npm highcharts versions = 12.0.0, 12.6.1...

CVE-2026-4480

🚨 CVE-2026-4480 - Critical Remote Code Execution in Samba Printing Subsystem Remote Code Execution RCE Samba Print Command Injection Vulnerability "A single print job name should never become a shell command." 📖 Overview CVE-2026-4480 is a critical command injection vulnerability affecting Samba'...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2024-47076

CUPS Common UNIX Printing System, the printing system of Linux and Unix systems, is a service related to print management and distributing tasks among devices. A security vulnerability named CVE-2024-47076 has been disclosed on this service. You can use the relevant scripts to learn whether your...

CUPS-CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS A simple tool to scan systems running CUPS Common Unix Printing System for the CVE-2024-47176 vulnerability. This vulnerability can lead to remote code execution RCE through the Internet Printing Protocol IPP on port 631. Features Automated Scanning :...

Google Chrome Microsoft Edge DoS

The Printing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

EUVD-2026-106445

Vulnerability in the Pasta product of Oracle E-Business Suite component: Printing Engine. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this...

Linux Distros Unpatched Vulnerability : CVE-2026-109781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-87404

Vulnerability in the Pasta product of Oracle E-Business Suite component: Printing Engine. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this...

CVE-2026-87404

A vulnerability exists in the Pasta product of Oracle E-Business Suite within the Printing Engine component, affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Pasta , potentially r...

PT-2026-119721

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Pasta versions 12.2.3 through 12.2.15 Description A flaw exists in the Printing Engine component of the Pasta product. A low privileged attacker with network access via HTTP can exploit this issue to compromise the...

Oracle E-Business Suite: CVE-2026-87404: Critical Patch Update

Vulnerability in the Pasta product of Oracle E-Business Suite component: Printing Engine. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

CVE-2026-55453

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix kernel pointer leak Pointers should be printed using %p or %px instead of being cast to ‘unsigned long’ and then printed using %lx. Replace %lx with %p when printing hashed pointers...