CVE-2024-47176

CUPS Browsd daemon which is by default running as root if allowed in Linux/Unix systems, allow remote connections from any device on the network to create a new printer. Start the python post server and then send the request to add the printer you will se a connection to your http server as root ...

CVE-2024-47176

CVE-2024-47176 !CAUTION For eduacational use/Defensive use only, Only use where you are authorised to do so, Use at own risk! How to python3 scanner.py CIDR SCANNER IP Example python3 scanner.py 192.168.0.0/16 192.168.5.100 Required Modules tqdm Install via pip3/apt: $ pip3 install tqdm $ sudo ap...

CVE-2004-0558

This is a proof of concept exploit for CVE-2004-0558 Specific versions of CUPs 1.1.x are vulnerable to a Denial of Service attack when sent a zero-length UDP packet https://www.exploit-db.com/exploits/24599/ It's worth noting that this can be achieved with nmap, and this exploit was developed for...

CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System is a printing system that primarily uses protocols such as IPP Internet Printing Protocol to manage print jobs and queues. On September 27, 2024, details of a remote code execution in Unix CUPS were disclosed on the internet, with the exploitation...

CVE-2026-34990-poc

CVE-2026-34990: CUPS 2.4.16 local privilege escalation PoC A Python3 adaptation of the original CUPS disclosure and PoC that runs as an ordinary local user against an existing CUPS service. It demonstrates a leaked Authorization: Local token and a race that lets CUPS write a file as root. Usage...

jugular

jugular Use jugs to look for CUPS: an ultrafast UDP sender, that tries to tickle listening cups-browsed processes to do a HTTP callback. This is a high performance scanner that writes UDP packets directly to the network. Install Ubuntu or similar sudo apt install golang libpcap0.8-dev go install...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A fully functional proof-of-concept exploit targeting the CUPS Common Unix Printing System remote code execution vulnerability chain discovered in September 2024. This chain consists of four CVEs — CVE-2024-47176, CVE-2024-47076, CVE-2024-47175,...

CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...

CUPS-Exploit

CUPS-Exploit Heap-based buffer overflow example based on CVE-2023-4504 Collaboration by Derek Johnson and Shobhit Mehrotra CS367 Spring 2025 Final Project You can view our report here!...

dirtycups

dirtycups.py Dirty CUPS is a free Linux/Unix CVE scanner Python3 script to validate if a target is vulnerable to CVE-2024-47176. This is a socket only CUPS scanner based off of MalwareTech's cupsscanner.py: https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py Original...

CUPS-CVE-2024-47176

This repository does not have a README...

CVE-2024-47076

CUPS Common UNIX Printing System, the printing system of Linux and Unix systems, is a service related to print management and distributing tasks among devices. A security vulnerability named CVE-2024-47076 has been disclosed on this service. You can use the relevant scripts to learn whether your...

CVE-2024-47176-Scanner

Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...

CVE-2026-34990

CVE-2026-34990 - CUPS Local Privesc Local privilege escalation against CUPS = 2.4.16 running as root. Leaks cupsd's Local auth token, then writes a NOPASSWD sudoers fragment as root via a file:// print queue. Usage python3 poc.py On success: CVE-2026-34990 | user=ctfplayer | cupsd=127.0.0.1:631...

cupspot-2024-47177

CUPS Honeypot Overview This project implements a honeypot for capturing attempted exploitations of vulnerabilities in the CUPS Common UNIX Printing System. Specifically, it is designed to monitor for exploitation attempts related to CVE-2024-47177. This vulnerability allows remote command executi...

CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

CVE-2026-39875-macOS-CUPS-LPE

CVE-2026-39875-macOS-CUPS-LPE Unprivileged user to root via CUPS vulnerability affecting macOS Tahoe, Sequoia, and Sonoma prior to macOS 26.6 / 15.7.8 / 14.8.8. Proof of Concept Demonstrations macOS Tahoe 26.4.1 macOS Sequoia 15.7.5 macOS Sonoma 14.8.5 Root Cause The vulnerability arises from two...

cupshax

CUPSHax Quick proof of concept for the recent CUPS exploit. I was planning to clean it up a lot more, but the embargo was lifted a lot sooner than expected, so the code is a bit rushed. For all the technical details you should honestly just read Evilsocket's writeup. This exploit was written afte...

CVE-2026-34990-poc

CVE-2026-34990 — CUPS Local-Printer PoC Authorized testing / research use only. Run this PoC only against systems you own or are explicitly authorized to test. This repository contains a system-CUPS-oriented reproduction of the local-printer vulnerability in CUPS 2.4.16. The implementation was...