HP Multiple LasterJet Printer xss

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...

HP Multiple LaserJet Printer - Cross-Site Scripting

HP Multiple LaserJet Printer - Cross-Site Scripting Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com...

HP Multiple LaserJet Printer - Cross-Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple Stored XSS Vulnerabilities Exploits:...

HP LaserJet Web Server Unspecified Admin Component Traversal Arbitrary File Access

The remote web server is an embedded web server for an HP LaserJet printer. The version of the firmware reported by the printer is reportedly affected by a directory traversal vulnerability. Because the printer caches printed files, an attacker could exploit this in order to gain access to...

HP LaserJet Printer Detection

The remote host is an HP LaserJet printer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36128; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/18"; scriptxrefname:"IAVT", value:"0001-T-0611"; scriptnameenglish:"HP LaserJet...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HP Embedded Web Server EWS on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that 1 print documents via unknown vectors, 2 modif...

CVE-2009-0940

Multiple cross-site request forgery CSRF vulnerabilities in the HP Embedded Web Server EWS on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that 1 print documents via unknown vectors, 2 modif...

CVE-2009-0941

The CVE-2009-0941 entry concerns the HP Embedded Web Server (EWS) used by HP LaserJet, Edgeline Printers, and Digital Senders. The vulnerability is due to the device exposing an interface with no management password by default, which can enable remote access. According to the NVD entry, this is a...

CVE-2009-0940

The CVE-2009-0940 entry describes multiple CSRF vulnerabilities in the HP Embedded Web Server (EWS) used by HP LaserJet printers, Edgeline printers, and Digital Senders. The vulnerabilities allow an attacker to hijack a user’s intranet connectivity to perform requests such as (1) printing documen...

HP LaserJet Cross Site Request Forgery

Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...

HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration

Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...

HP LaserJet printers crossite request forgery

Crossite request forgery with form data in conjunctions with insecure default access...

[security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01623905 Version: 1 HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files NOTICE: The information in...

Directory traversal

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color...

CVE-2008-4419

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color...

HPSBPI01085 SSRT4840 rev.3 - HP LaserJet, Remote Denial of Service (DoS)

Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY A potential security vulnerability has been identified with the remote upgrade capability of Laserjet printers. This vulnerability could be exploited remotely to create a Denial of Service DoS. RESOLUTION The following...

hp-dos.txt

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix 26 March 2007 MorX security research team www.morx.org +-------------+ | Description :-------------------------------------------------------------------------------...

[Full-disclosure] Remote DOS HP JetDirect Print Servers

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix handrixatmorxorg 26 March 2007 MorX security research team www.morx.org +-------------+ | Description...

HP Multiple Products PML Driver Local Privilege Escalation

HP Multiple Products PML Driver Local Privilege Escalation By Sowhat of Nevis Labs 2007.01.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20070108.txt Vendor Hewlett-Packard Products Affected HP All-In-One products HP PSC 700 series HP PSC 900 series HP PSC 1100 series HP PSC 1200...

CVE-2006-6742

Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47, and HP LaserJet 5100 Series printers with firmware V.29.12, allow remote attackers to cause a denial of service device crash via a long string in the 1 LIST or 2 NLST...