CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

CVE-2023-31046

The CVE-2023-31046 issue affects PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. It is a Path Traversal vulnerability where, under certain conditions, an authenticated attacker could obtain read‑only access to the server filesystem by crafting requests like GET /ui/static/..//.., which r...

PaperCut MF and PaperCut NG Path Traversal Vulnerabilities

PaperCut MF and PaperCut NG are both products of PaperCut Australia.PaperCut MF is a multifunctional printer control software.PaperCut NG is a next-generation printer control software.PaperCut NG is a next-generation printer control software.PaperCut MF is a multifunctional printer control...

CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

PaperCut NG < 20.1.9 / 21.x < 21.2.13 / 22.x < 22.1.3 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut host’s file storage. This could exhaust system...

PaperCut NG Path Traversal/File Upload RCE (CVE-2023-39143)

Binary data papercutngcve-2023-39143.nbin...

PaperCut MF Installed (Windows)

Binary data papercutmfwininstalled.nbin...

PaperCut NG Installed (Windows)

Binary data papercutngwininstalled.nbin...

PaperCut MF Path Traversal/File Upload RCE (CVE-2023-39143)

Binary data papercutmfcve-2023-39143.nbin...

PaperCutNG Mobility Print Cross-Site Request Forgery Vulnerability

PaperCutNG Mobility Print is a product of PaperCutNG, Inc. designed to provide mobile printing solutions for schools, businesses and other organizations. A security vulnerability exists in PaperCutNG Mobility Print version 1.0.3512 that stems from the application not being protected against CSRF...

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

Design/Logic Flaw

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568

CVE-2023-4568 – PaperCut NG Unauthenticated XMLRPC : Multiple sources confirm PaperCut NG is vulnerable to unauthenticated XML-RPC commands that can be run by default. Affected versions are 22.0.12 and earlier; newer builds may also be affected due to lack of vendor patching. The underlying issue...

CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

PaperCut NG Authorization Issues Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG versions 22.0.12 and earlier, which stems from a default that allows unauthenticated XMLRPC commands to be run...

The vulnerability of the External User Lookup function in printing control software such as PaperCut MF and PaperCut NG allows a violator to execute arbitrary code.

The vulnerability of the External User Lookup function in printing control software such as PaperCut MF and PaperCut NG is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...

PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists within the External User Lookup functionality. The issue results from the lack of proper validation of ...

PT-2023-5170 · Papercut · Papercut Ng

Name of the Vulnerable Software and Affected Versions: PaperCut NG versions 22.0.12 and below Description: The issue is related to the implementation of the XML-RPC protocol in PaperCut NG, which has weaknesses in its authentication procedure. This can allow a remote attacker to execute arbitrary...