KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Basato sull'exploit originale di Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ crediti a Aaron Herndon / https://twitter.com/ac3lives /...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Eine unauthentifizierte Datenextraktions-Schwachstelle in Kyocera-Druckern, die das Auslesen von Klartext-Adressbüchern und Domänen-Anmeldeinformationen ermöglicht. Schwachstellenübersicht Anfang 2021, während eines Penetrationstests, experimentierte ich mit der...

Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. id: CVE-2022-1026 info: name: Kyocera Net View Address Book Exposure autho...

kygocera

kygocera CVE-2022-1026 Versão melhorada em Golang do PoC da Rapid7 para CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ créditos para Aaron Herndon / https://twitter.com/ac3lives saudações para https://github.com/D4RKMATT3R...

CVE-2025-63579

CVE-2025-63579 وصول غير مصرح به إلى جميع أسماء المستخدمين وكلمات المرور المُدخلة في ميزة دفتر العناوين الموجودة في طابعات Kyocera Command Center RX. الوصف الاستخدام غير المصرح به لطابعات Kyocera، يسمح بتصدير جميع المعلومات المخزنة في دفتر عناوين Kyocera. يمكن تجاوز الإجراء الأمني الذي يشفر البيان...

Kyocera Printer d-COPIA253MF - Directory Traversal

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. id: CVE-2020-23575 info: name: Kyocera Printer d-COPIA253MF - Directory Traversal author: 0xAkoko severity: high...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords. Vulnerability Overview Back in 2021 while on a pen test, I was tinkering with Kyocera's thick client application used to...

CVE-2023-49367

CVE-2023-49367 - Exposição de Dados Sensíveis Exposição de Dados Sensíveis no Painel Web da Impressora Kyocera Fornecedor: Kyocera Corporation Versões Afetadas: Command Center RX - EXOSYS M5521cdn Descrição Após conectar-se ao livro de endereços da interface Kyocera, solicitações de teste para sm...

EUVD-2025-210448

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

CVE-2025-63579 affects Kyocera devices using Command Center RX for various TASKalfa models (e.g., 2552ci, 3252ci, 2553ci, 3253ci, 3554ci, 4052ci, 5052ci, 6052ci, 7052ci, 8052ci, 7353ci, 8353ci, 2554ci, 3254ci, 505). The description reports that unauthorized access can export all information store...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer

KyoceraCredsDump - CVE-2022-1026 - Based on the original explo...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

CVE-2022-50932 affects Kyocera Command Center RX ECOSYS M2035dn. A directory traversal flaw on the /js/ path allows unauthenticated attackers to read sensitive files (e.g., /etc/passwd, /etc/shadow) by crafting traversal strings (including null-byte variants). Reported exploitation exists (e.g., ...