DEBIAN-CVE-2024-56724

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

UBUNTU-CVE-2024-56723

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

CVE-2024-56723 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

PT-2024-26931 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation MFPs affected versions not specified Toshiba Tech Corporation MFPs affected versions not specified Description: A cross-site scripting issue exists in multiple MFPs from Sharp Corporation and Toshiba Tech Corporation. This...

Sharp Multi-Function Printer 18 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "17 vulnerabilities in Sharp Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html The text version is also posted here:...

TP-LINK ER7206 Command Execution Vulnerability

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. A command execution vulnerability exists in the TP-Link ER7206 Omada Gigabit VPN Router version 1.4.1 Build 20240117, which stems from the presence of residual debugging code that can be exploited by an attacker to caus...

TP-LINK ER7206 OS Command Injection Vulnerability (CNVD-2024-15547)

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. An operating system command injection vulnerability exists in TP-LINK ER7206 version 1.3.0 build 20230322 Rel.70591, which can be exploited by an attacker to execute arbitrary commands on the system...

kernel: regulator: core: Use different devices for resource allocation and DT lookup

In the Linux kernel, the following vulnerability has been resolved: regulator: core: Use different devices for resource allocation and DT lookup Following by the below discussion, there's the potential UAF issue between regulator and mfd...

FujiFilm printer credentials encryption issue fixed

TL;DR Many multi-function printers made by FujiFilm Business Innovation Corporation Fujifilm which includes Apeos, ApeosPro, PrimeLink and RevoriaPress brands as well as Xerox Corporation Xerox which includes VersaLink, PrimeLink, and WorkCentre brands, allow administrators to store credentials o...

HP Enterprise LaserJet MFP 安全漏洞

The HP LaserJet Enterprise MFP is an all-in-one printer from Hewlett-Packard HP in the United States. A security vulnerability exists in the HP Enterprise LaserJet MFP that originates from allowing a buffer overflow or remote code execution...

PYSEC-2023-80

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This applies to contracts compiled with vyper version...

Fujifilm / Fuji Xerox Printers Cryptography Vulnerability (Mar 2022)

Multiple Fujifilm / Fuji Xerox printers are prone to a cryptography vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

Pupy - Opensource, Cross-Platform (Windows, Linux, OSX, Android) Remote Administration And Post-Exploitation Tool

Pupy is an opensource, cross-platform Windows, Linux, OSX, Android, multi function RAT Remote Administration Tool and post-exploitation tool mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports,...

JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery

e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...

[SECURITY] Fedora 18 Update: hplip-3.13.9-2.fc18

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

[SECURITY] Fedora 20 Update: hplip-3.13.9-2.fc20

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

[SECURITY] Fedora 19 Update: hplip-3.13.9-2.fc19

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

Lexmark Markvision Enterprise Detection

Lexmark Markvision Enterprise, a web-based printer and multi-function device management system, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66326; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lexmark...