PT-2020-12277

Name of the Vulnerable Software and Affected Versions Canon Oce Colorwave 500 versions prior to the latest version Description The Canon Oce Colorwave 500 printer's web application lacks CSRF protections, allowing an attacker to perform administrative actions by targeting a logged-in administrati...

CVE-2020-10670: Improper Neutralization of Input During Web Page Generation

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the parameter settingId of the settingDialogContent.jsp page. NOTE: this is fixed in the latest version...

PT-2020-12275

Name of the Vulnerable Software and Affected Versions Canon Oce Colorwave 500 version 4.0.0.0 Description The web application exposed by the Canon Oce Colorwave 500 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the device's we...

FreeBSD-SA-20:05.if_oce_ioctl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:05.ifoceioctl Security Advisory The FreeBSD Project Topic: Insufficient oce4 ioctl2 privilege checking Category: core Module: oce4 Announced: 2020-03-19...

PT-2020-12276

Name of the Vulnerable Software and Affected Versions Canon Oce Colorwave 500 version 4.0.0.0 Description The web application exposed by the Canon Oce Colorwave 500 printer is vulnerable to Reflected XSS in the settingId parameter of the "settingDialogContent.jsp" page. Recommendations For versio...

FreeBSD -- Insufficient oce(4) ioctl(2) privilege checking

Problem Description: The driver-specific ioctl2 command handlers in oce4 failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact: The oce4 handler permits unprivileged users to send passthrough commands to device firmware...

Buffer overflow

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...

CVE-2018-11855

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...

CVE-2018-11855

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...

PT-2019-8812

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM630, SDM660 Description The issue arises when an end user utilizes the SCP11 sample OCE cod...

CVE-2018-11855: Integer Overflow or Wraparound

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...

Easy~FTP Server v1.7.0.2 CWD Command Buffer Overflow

New Ticket: EasyFTP BoF meta Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested on: Windows XP SP3 CVE : require 'msf/core' class Metasploit3 'EasyFTP Server v1.7.0.2 CWD Command Buffer Overflow', 'Description' = %q This module exploits a stack overflow in the CWD ve...

CVE-2006-2108: Improper Restriction of Operations within the Bounds of a Memory Buffer

parser.exe in Océ OCE 3121/3122 Printer allows remote attackers to cause a denial of service crash or reboot via a long request, possibly triggering a buffer overflow...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

No description provided by source. !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ============================================================ OCE 3121/3122 Printer parser.exe Denial of Service Exploit ============================================================ !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit...

OCE 3121/3122 Printer - 'parser.exe' Denial of Service

!/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being filtered for bad characters. However i...

oce9400.txt

This appeared on bugtraq in August of 99 I am aware of the Intelligent Peripherals bulletin by CIAC. http://www.ciac.org/ciac/bulletins/j-019.shtml I have a few plotters / printers under my audit umbrella and noticed something interesting on an Oce' 9400 plotter. The printer has the ability to be...