CVE-2024-6333

CVE-2024-6333 - Xerox Authenticated Remote Code Execution Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature. Description The Network Troubleshooting Log functionality /properties/security/networktroubleshootinglog.php fails ...

CVE-2026-1769-WriteUp

CVE-2026-1769 — Stored XSS in Xerox CentreWare Web Disclosure timeline and technical write-up for CVE-2026-1769 , a Stored Cross-Site Scripting vulnerability I identified and responsibly disclosed to Xerox. CVE record: cve.org/CVERecord?id=CVE-2026-1769 Vendor security bulletin: XRX26-003 CWE:...

CVE-2021-3438

What is included? CVE-2021-3438detection v2sccm.ps1 is a script to run via sccm to get a small report on the vulnerability of managed devices. CVE-2021-3438detection.ps1 is a script to run manually or remote on a managed device. CVE-2021-3438remediation.ps1 is a script to check and run the...

Exploit for Cross-site Scripting in Xerox Centreware_Web

CVE-2026-1769 — Stored XSS in Xerox CentreWare Web Disclosure...

Xerox CentreWare Web 7.0.6 Cross Site Scripting

Xerox CentreWare Web version 7.0.6 contains a stored cross site scripting vulnerability...

Malicious code in koala-xerox-eky245-project (npm)

The package koala-xerox-eky245-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jade-xerox-thq913-project (npm)

The package jade-xerox-thq913-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in honey-xerox-scg393-project (npm)

The package honey-xerox-scg393-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in gorge-xerox-asw449-project (npm)

The package gorge-xerox-asw449-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in glade-xerox-qis487-project (npm)

The package glade-xerox-qis487-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in emerald-xerox-ksk428-project (npm)

The package emerald-xerox-ksk428-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cat-xerox-mjs874-project (npm)

The package cat-xerox-mjs874-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aspen-xerox-hrj009-project (npm)

The package aspen-xerox-hrj009-project was found to contain malicious code. --- Credit: OpenSSF source...

Xerox EFI Fiery Webtools LFI File Read

Reads arbitrary files via forceSave.php on Xerox DC260 EFI Fiery Controller Webtools 2.0. !/usr/bin/env python3 -- coding: utf-8 -- """Xerox EFI Fiery Controller Webtools forceSave.php pre-auth LFI file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Fuji Xerox Printer Panel - Detect

Fuji Xerox printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fuji Xerox printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fuji Xerox Printer Panel - Detect',...

Fuji Xerox Internet Services Panel - Detect

Fuji Xerox Internet Services panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fuji Xerox Internet Services panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fuji Xerox Internet...

Xerox Fuji/VersaLink Login - Panel Detection

Xerox Fuji / VersaLink Login Panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Xerox Fuji / VersaLink Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xerox Fuji/VersaLink...

Xerox Workcentre Detect

Detects Xerox Workcentre Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Xerox Workcentre Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xerox Workcentre Detect', 'description': 'Detects Xerox...

Xerox DC260 EFI Fiery Controller Webtools 2.0 - Local File Inclusion Detection

Xerox DC260 EFI Fiery Controller Webtools 2.0 is vulnerable to local file inclusion because input passed thru the 'file' GET parameter in 'forceSave.php' script is not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files ...

Fuji Xerox ApeosPort - Default Login Detection

This template checks for the default credentials username: 11111, password: x-admin on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2. !/usr/bin/env python3 -- coding: utf-8 -- """This...