CVE-2024-47176

PoC: cups-browsed 上的未认证远程代码执行 📜 漏洞信息 发布日期 : 2024-09-26 基础评分 : 5.3 中等 EPSS评分 : 0.06% 利用概率 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 描述 : CUPS 是一个基于标准、开源的打印系统，而 cups-browsed 包含网络打印功能，包括但不限于自动发现打印服务和共享打印机。cups-browsed 绑定到 INADDRANY:631，使其信任来自任何来源的任何数据包，并可能导致 Get-Printer-Attributes IPP...

CUPS-CVE-2024-47176

CVE-2024-47176 CUPS 漏洞扫描器 一个用于扫描运行 CUPS（通用 Unix 打印系统） 系统的简单工具，检测 CVE-2024-47176 漏洞。该漏洞可通过端口 631 上的 互联网打印协议（IPP） 导致远程代码执行（RCE）。 功能特性 自动化扫描 ：发送精心构造的 UDP 数据包以检测易受攻击的 CUPS 实例。 多线程扫描 ：高效地同时扫描多个 IP 地址。 回调日志记录 ：通过回调服务器记录来自易受攻击系统的响应。 安装 1. 克隆仓库： git clone...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS 详细漏洞分析和Exploit编写过程已经发表在安全客上： http://bobao.360.cn/learning/detail/3644.html C Exploit中，少一个printf打印最后的color数组，可以自行添加，也可直接用debug调试观察内存泄露 JS Exploit已经更新一个可以直接打印bitmap的版本...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-47076

CUPS Common UNIX Printing System, el sistema de impresión de sistemas Linux y Unix, es un servicio relacionado con la gestión de impresión y la distribución de tareas entre dispositivos en estos sistemas. Se ha revelado una vulnerabilidad de seguridad denominada CVE-2024-47076 en este servicio...

[SECURITY] Fedora 45 Update: ocaml-easy-format-1.3.4-21.fc45

This module offers a high-level and functional interface to the Format module of the OCaml standard library. It is a pretty-printing facility, i.e. it takes as input some code represented as a tree and formats this code into the most visually satisfying result, breaking and indenting lines of cod...

PT-2026-106957

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-4480-POC

CVE-2026-4480 - Ejecución Remota de Código en el Subsistema de Impresión de Samba Descripción general Material de prueba de concepto e investigación relacionado con CVE-2026-4480 , una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta al subsistema de impresión de Samba. La...

CVE-2026-4480

🚨 CVE-2026-4480 - Samba打印子系统中的关键远程代码执行 远程代码执行（RCE） Samba打印命令注入漏洞 "一个打印作业名称绝不应该成为一条shell命令。" 📖 概述 CVE-2026-4480 是一个影响Samba打印子系统的严重命令注入漏洞。 在特定配置下，Samba可能会将用户控制的打印作业名称（%J）直接传入shell命令而未进行充分的转义或验证，从而可能允许攻击者在受影响服务器上执行任意命令。 🎯 漏洞详情 字段| 值 ---|--- CVE ID| CVE-2026-4480 严重性| 🔴 严重 CVSS评分| 10.0 CWE| CWE-78 类型...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba 打印任务名称命令注入 概述 CVE-2026-4480 是一个影响特定 Samba 打印配置（使用外部打印命令）的命令注入漏洞。 该漏洞存在的原因是 Samba 将用户控制的打印任务元数据插入到 shell 命令中，而没有正确转义 shell 元字符。在特定配置下，攻击者可以提供恶意的打印任务名称，导致在服务器上执行任意命令。 该问题尤其危险，因为某些打印机共享允许访客访问，使得无需身份验证即可利用。 根本原因 Samba 支持多种打印后端。一种传统选项通常称为 sysv 风格打印...

[SECURITY] Fedora 44 Update: hplip-3.26.6-1.fc44

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

CVE-2026-95381

An improper input validation flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497603247...

Multiple Samba Remote Code Execution Vulnerabilities (CVE-2026-4480, CVE-2026-4408)

Brocade has released a security advisory addressing two Remote Code Execution RCE vulnerabilities in upstream Samba software: CVE-2026-4480 and CVE-2026-4408. Both vulnerabilities result from improper input sanitization CWE-78, which allows unescaped data to be passed into system commands or...

CLEANSTART-2024-UC94514 Stack buffer overflow in Printing in Google Chrome prior to 92

Security vulnerability affects the chromium package. Stack buffer overflow in Printing in Google Chrome prior to 92...

CLEANSTART-2024-PC91651 Use after free in Printing in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in Printing in Google Chrome prior to 92...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libnetapi / libnetapi-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_22644)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622644 advisory. samba: group policy certificate enrollment uses http:// without validation CVE-2026-3012 samba: Samba: Remote Code Execution in printing subsystem via...

AlmaLinux 9.2 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782483693)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782483693 advisory. - A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability...

CentOS Linux 8.5 [TuxCare] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.5:CLSA-2026:1780943682)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780943682 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1780510989)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780510989 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured wit...