17 matches found
CVE-2023-27350
CVE-2023-27350 影响 PaperCut MF/NG 的 CVE-2023-27350 概念验证代码 技术分析 关于漏洞的技术根本原因分析、入侵指标以及互联网暴露情况，可查阅我们的博客： https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise 摘要 该概念验证代码利用认证绕过漏洞，并结合滥用内置脚本功能来执行代码。 使用方法 root@kitploit: python3 CVE-2023-27350.py --url...
CVE-2023-27350-POC
CVE-2023-27350-POC 描述： 该工具旨在利用 PaperCut MF/NG 8.0 及以上版本（但低于 20.1.7、21.2.11 或 22.0.9 版本）中的认证绕过漏洞。该漏洞允许未经授权访问系统，并可能被用于恶意目的。 安装： 1. git clone https://github.com/TamingSariMY/CVE-2023-27350-POC.git 2. pip install pyfiglet 使用方法： 1. python3 vuln.py 2. 输入 IP 地址：xx.xx.xx.xx Shodan Dorks： 1...
CVE-2023-27350
CVE-2023-27350 漏洞利用概念验证 这是针对 CVE-2023-27350 的概念验证（POC）利用代码，该漏洞存在于 PaperCut MF/NG 中，允许未经身份验证的攻击者以 SYSTEM 权限执行任意代码。 环境要求 在使用此利用代码前，请确保已安装以下库： root@kitploit: pip install -r requirements.txt 用法 root@kitploit: python CVE-2023-27350.py -u -c | --reverse-shell | -f 选项 -u, --url: 目标 PaperCut MF/NG 应用的...
CVE-2023-27350-PoC
CVE-2023-27350 该 PoC 演示了如何在 PaperCut MF/NG 从 8.0 版本开始，但不包括 20.1.7、21.2.11 和 22.0.9 的版本中绕过身份验证。它允许在没有有效登录凭据的情况下与系统进行交互。 Shodan 查询 1. http.html:"papercut" 2. http.html:"papercut" port:9191 3. http.title:"PaperCut Login" 用法 python cve-2023-27350.py 127.0.0.1...
CVE-2023-27350
CVE-2023-27350 影响 PaperCut MF/NG 的 CVE-2023-27350 的 POC 受影响的版本 'PaperCut MF 或 NG 版本 8.0 及以上（不包括已修补版本），适用于所有操作系统平台。' 摘要 此 POC 利用身份验证绕过漏洞，结合滥用内置脚本功能来执行代码。 Usage root@kitploit: python3 CVE-2023-27350.py --url 'http://10.0.40.56:9191' --command calc.exe Papercut instance is vulnerable! Obtained valid...
CVE-2023-27350-POC
CVE-2023-27350-POC 一个用于搜索易受攻击版本的PaperCut MF/NG的Python脚本。 更多信息请访问：https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software 注意：此工具仅用于教育目的。使用风险自负。...
CVE-2026-81578
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...
EUVD-2026-67714
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078
CVE-2026-82078 is an unsafe dynamic class loading vulnerability (CWE-470, CVSS 9.4 Critical) in the database connection utilities of PaperCut NG and PaperCut MF . The application instantiates database driver classes from configurable names without an allowlist, allowing arbitrary Java bytecode to...
CVE-2026-81578
An improper access control vulnerability (CWE-306) in the web management interface of PaperCut MF and PaperCut NG allows unauthenticated remote attackers to trigger administrative backend actions before access validation completes, enabling modification of system configurations. The root cause in...
CVE-2026-81578 PaperCut MF/NG: Authentication Bypass
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...
CVE-2026-81578 PaperCut MF/NG: Authentication Bypass
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...
VulnCheck KEV: CVE-2026-82078
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2023-2533 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
A Cross-Site Request Forgery CSRF vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session...
