Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

Xerox WorkCentre - PJL Daemon Buffer Overflow PoC source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with the privileges of the...

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access (XRX09-003)

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow a remote attacker to obtain unauthorized access to device configuration settings, possibly exposing customer passwords. Note that successful exploitation requires that SSL is not...

Xerox Workcentre DoS

Crash on flood with LPR requests...

Xerox WorkCentre multiple models Denial of Service

Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected] Application: Xerox WorkCentre Verifie...

Xerox WorkCentre Multiple Models Denial of Service Exploit

No description provided by source. Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected]...

Xerox WorkCentre Multiple Models Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================== Xerox WorkCentre Multiple Models Denial of Service Exploit ========================================================== Louhi Networks Information Security Research Security Advisory...

Xerox WorkCentre (Multiple Models) - Denial of Service

Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected] Application: Xerox WorkCentre Verifie...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1656

The CVE-2009-1656 entry pertains to Xerox WorkCentre/WorkCentre Pro devices: models 232, 238, 245, 255, 265, 275 and 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675. Documented issue: a remote command-injection vulnerability in the device web server that allows arbitrary commands to be...

Xerox WorkCentre Web Server Unspecified Command Injection (XRX09-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly has an as-yet unspecified command injection vulnerability in its web server. A remote attacker may be able to leverage this issue to execute arbitrary code via carefully crafted inputs...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6436

Cross-site scripting XSS vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6436

The CVE-2008-6436 entry concerns the Web Server component of Xerox WorkCentre devices (7132, 7228, 7235, 7245). A cross-site scripting (XSS) vulnerability could allow remote attackers to inject arbitrary web script or HTML through unspecified vectors. The affected product is the Xerox WorkCentre ...

Xerox WorkCentre Web Server Unspecified Command Injection (XRX09-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly has an as-yet unspecified command injection vulnerability in its web server. A remote attacker may be able to leverage this issue to execute arbitrary code via carefully crafted inputs...

Xerox WorkCentre Samba Overflow (XRX08-009)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly allows a remote attacker to execute arbitrary code via specially crafted Service Message Block SMB responses due to vulnerabilities in the third-party code it uses to handle file and...

CVE-2008-2824

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...

CVE-2008-2825

Cross-site scripting XSS vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2824

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...