CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions root@kitploit: The script automatically tests i...

CVE-2023-27350

CVE-2023-27350 Exploit POC This is a Proof of Concept POC exploit for CVE-2023-27350, a vulnerability found in PaperCut MF/NG that allows an unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Requirements Before using this exploit, make sure you have installed the followin...

PaperCut < 22.1.3 - Path Traversal

PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables attackers to read, delete, and upload arbitrary files. id: CVE-2023-39143 info: name: PaperCut 22.1.3 - Path Traversal author: pdteam severity: critical description: PaperCut NG and PaperCut MF before 22.1.3...

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

CVE-2023-27350-POC

CVE-2023-27350-POC 説明: このツールは、PaperCut MF/NG バージョン 8.0 以上、ただし 20.1.7、21.2.11、または 22.0.9 より前のバージョンにおける認証バイパス脆弱性を悪用するために設計されています。この脆弱性により、システムへの不正アクセスが可能になり、悪意のある目的に使用される可能性があります。 インストール: 1. git clone https://github.com/TamingSariMY/CVE-2023-27350-POC.git 2. pip install pyfiglet 使用法: 1. python3...

CVE-2023-27350

CVE-2023-27350 PaperCut MF/NGに影響するCVE-2023-27350のPoC 技術的分析 脆弱性の根本原因分析、侵害指標、インターネット露出については、当社のブログをご覧ください： https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise 概要 このPoCは、認証バイパスの脆弱性と組み込みスクリプト機能の悪用を連鎖させてコードを実行します。 使用法 root@kitploit: python3 CVE-2023-27350.py --url...

CVE-2023-27350

CVE-2023-27350 PaperCut MF/NG に影響する CVE-2023-27350 の POC Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' 概要 この POC は、認証バイパスの脆弱性と、ビルトインスクリプト機能の悪用を連鎖させてコードを実行します。 使用法 root@kitploit: python3 CVE-2023-27350.py --url 'http://10.0.40.56:9191'...

PaperCut NG Unauthenticated XMLRPC Functionality

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. id: CVE-2023-4568 info: name: PaperCut NG Unauthenticated XMLRPC Functionality...

CVE-2023-27350-POC

CVE-2023-27350-POC A python script tht searches for vulnerable version of PaperCut MF/NG More information can be found here: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software Note: This was created for educational use only. Use at your own risk...

papercut-toolkit

PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit A defensive toolkit to check and understand exposure to the chained pre-auth remote code execution vulnerabilities in PaperCut: CVE-2026-81578 — Missing Authentication for Critical Function CWE-306. A remote unauthenticated request can...

CVE-2026-8793

CVE-2026-8793 — Missing Brute-Force Protection on PaperCut NG Login Form Field| Details ---|--- CVE ID| CVE-2026-8793 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-307 — Improper Restriction of Excessive Authentication Attempts CVSS Score| 5.3 Medium — standalone...

CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability

This repository does not have a README...

CVE-2023-27350

CVE-2023-27350 This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper...

CVE-2023-27350-PoC

CVE-2023-27350 このPoCは、PaperCut MF/NGのバージョン8.0以降、20.1.7、21.2.11、22.0.9未満のバージョンにおいて認証をバイパスする方法を示しています。有効なログイン資格情報を使用せずにシステムとやり取りすることが可能です。 Shodan プロンプト 1. http.html:"papercut" 2. http.html:"papercut" port:9191 3. http.title:"PaperCut Login" 使い方 python cve-2023-27350.py 127.0.0.1...

CVE-2026-8794

CVE-2026-8794 — Username Enumeration via Authentication Timing Side-Channel in PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-208 — Observable Timing Discrepancy CVSS Score| 3.7 Low — standalone; escalates...

PaperCut-CVE-2026-81578-82078

Professional security research tool for PaperCut NG/MF vulnerability assessment & authorized exploitation root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡ powered by yora 19...

CVE-2023-27350-CVE-2023-27351

CVE-2023-27350, CVE-2023-27351 CVE-2023-27350, CVE-2023-27351, CVE-2026-PaperCut Donate...

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5, 25.0.13 and...

CVE-2023-27350

CVE-2023-27350 Python 2.7 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Reff : https://nvd.nist.gov/vuln/detail/CVE-2023-27350 Shodan Dork http.html:"papercut" http.html:"papercut" port:9191 http.title:"PaperCut Login"...

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence AI to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and...