BOF-coerce-ipp

IPP Coercion BOF A Beacon Object File BOF that forces a Windows machine to authenticate over HTTP as its computer account HOSTNAME$, by triggering a directed IPP association through the WSD port monitor. This technique allows operators to coerce and relay machine-account authentication over HTTP...

fuzzowski

Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during the whole proces...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...

CVE-2026-34990

CVE-2026-34990 — CUPS local privilege escalation cups2root, de-harnessed CVSS 3.x : 8.4 HIGH approx — verify CWE : CWE-287 Improper Authentication + CWE-269 Improper Privilege Mgmt Fix : CUPS 2.4.17+ Affects : CUPS ≤ 2.4.16 with cupsd running as root and 631 reachable locally Local privilege...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A fully functional proof-of-concept exploit targeting the CUPS Common Unix Printing System remote code execution vulnerability chain discovered in September 2024. This chain consists of four CVEs — CVE-2024-47176, CVE-2024-47076, CVE-2024-47175,...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:98108)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98108 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-U...

RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:99063)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99063 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-U...

Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2026-3415)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3415 advisory. An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The...

cups: Fix of CVE-2026-55453

CVE-2026-55453: fix PPD keyword injection by replacing control characters in IPP strings backends report to cupsd, and drop special PPD keywords...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_88280)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688280 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...

CLSA-2026-1792768763 cups: Fix of CVE-2026-55453

CVE-2026-55453: fix scheduler status-stream injection by replacing control characters in the IPP attribute values the ipp backend reports to cupsd...

CLSA-2026-1792768682 cups: Fix of CVE-2026-55453

CVE-2026-55453: fix scheduler status-stream injection by replacing control characters in the IPP attribute values the ipp backend reports to cupsd...

golang-github-openprinting-ipp-usb security update

An update is available for golang-github-openprinting-ipp-usb. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HTTP reverse proxy, backed by IPP-over-USB...

RLSA-2026:88280 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial o...

golang-github-openprinting-ipp-usb security update

0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-88280)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88280 advisory. 0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RockyLinux 10 : golang-github-openprinting-ipp-usb (RLSA-2026:88280)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88280 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...