802 matches found
pixma
What is this? Some little tools to unpack firmware of Canon PIXMA series for analysis. Motivation Some Pixma printer is unable to reset the Waste Ink counter and refuses to print now, even though waste ink container has been swapped out. So I was curious about the inner workings of the firmware t...
CVE-2021-43471
CVE-2021-43471 Denial of service vulnerability caused by unauthorized access to Canon printers Affect product: LBP223 Time: 2021.11.3 The System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a...
canon-mf644
Released tools and scripts for Canon MF644 Exploit for Pwn2Own 2021 - Vulnerability in CADM firmware 10.02 This repository contains the following files related to the exploit: exploit.py : Python exploit working against firmware in version 10.02 Makefile : Makefile used to assemble the ARM...
printer-cracktro
printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...
CVE-2021-41822
CVE-2021-41822（水的一个） Canon printer unauthorized access vulnerability and denial of service vulnerability The attacker does not need an account or password to access the printer page and obtain information about printed files. And the printer can be turned off remotely. Create denial of service...
CVE-2019-14339
CVE-2019-14339 Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339. Proof of concept by @0x48piraj The ContentProvider in the Canon PRINT 2.5.5 application for Android does not properly restrict data access. This allows an attacker's malicious application to obtain sensitive...
Canon Devices - Authentication Bypass in Catwalk Server
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
canon-tools
canon-tools Tools used for decrypting Canon PIXMA printers firmwares. For more information about the background, please refer to the following blogpost: https://synacktiv.com/publications/treasure-chest-party-quest-from-doom-to-exploit References This work was inspired by Contextis research...
Cisco ASA Use of Out-of-range Pointer Offset (CVE-2026-20022)
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the...
PT-2026-99742
Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenARC versions prior to 1.0.0.Beta0 Description A security flaw in the libopenarc component allows for a remote attack. The issue resides in the arc parse canon t function within the libopenarc/arc-canon.c library, whe...
PT-2026-99729
Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A weakness exists in the DKIM Signature Header Selection component within the dkim canon selecthdrs function of the libopendkim/dkim-canon.c file. A remote attacker can manipulate the h argument to...
Astra Linux – Vulnerability in exiv2
In Exiv2 through 0.27.1, a vulnerability in CiffDirectory::readDirectory allows for integer overflow and out-of-bounds reads. This vulnerability enables an attacker to cause a denial of service SIGSEGV by using a crafted CRW image file...
CGA-453W-F6V3-GMJ3
Bulletin has no description...
Canon Remote UI Login Panel - Detect
Canon Remote UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Canon Remote UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Canon Remote UI Login Panel - Detect',...
Canon R-ADV C3325 - Unauth Detection
Canon R-ADV C3325 unauthenticated dashboard has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Canon R-ADV C3325 unauthenticated dashboard has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
USN-8586-1: libgphoto2 vulnerabilities
It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. CVE-2026-40333 It was discovered that libgphoto2 did not properly null-terminate buffer...
USN-8586-1 libgphoto2 vulnerabilities
It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. CVE-2026-40333 It was discovered that libgphoto2 did not properly null-terminate buffer...
meralion-3-asr (>=0.0.2, <=0.1.0), omnes-flores (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-34753 via vllm (0.16.0)
vllm PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - meralion-3-asr =0.0.2, =0.1.0, =0.1.1 - vllm-canon 0.1.0 Source cves: CVE-2026-34753 Source advisory: OSV:PYSEC-2026-3410...
meralion-3-asr (>=0.0.2, <=0.1.0), omnes-flores (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-25960 via vllm (>=0.15.1, <=0.16.0)
vllm PYPI version =0.15.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 - vllm-canon 0.1.0 Source cves: CVE-2026-25960 Source advisory: OSV:PYSEC-2026-3411...
