96 matches found
PSO - Printer Security Offensive
🖨️ PSO - 打印机安全攻击工具 版本 0.4.0 | 更新日志 “打印机的 Nmap” - 用于打印机渗透测试的攻击性安全工具。 快速。专注。无冗余。 ⚠️ 法律声明 PSO 包含评估 和利用 功能。使用前务必获得明确授权。 安全模式： 扫描 + IPP 查询 攻击模式 --aggressive：PJL 文件系统利用 未经授权的网络扫描是违法的。请负责任地使用。 功能特性 ✅ 主动网络扫描 - 支持 CIDR 范围及自定义端口 ✅ 端口范围 - 高效扫描 443,631,5000-6000,9100 ✅ 二进制 IPP 协议 - 原生 IPP 精准获取打印机属性 ✅ PJL...
PRET
PRET - 打印机利用工具包 你的打印机安全吗？在别人发现之前检查一下…… PRET 是一款用于打印机安全测试的新工具，基于鲁尔大学波鸿分校的一篇硕士论文开发。它通过网络或 USB 连接到设备，并利用指定打印机语言的功能。目前支持 PostScript、PJL 和 PCL，大多数激光打印机都支持这些语言。这可以实现诸如捕获或操纵打印作业、访问打印机文件系统和内存，甚至对设备造成物理损坏等酷炫功能。所有攻击方法均在 Hacking Printers Wiki 中有详细记录。 PRET 的主要理念是简化最终用户与打印机之间的通信。因此，在输入类 UNIX 命令后，PRET 会将其转换为...
Lexmark Printer Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2010-0619)
Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service device hang via a long argument t...
EUVD-2018-8510
Malware in sbrugna...
EUVD-2010-0650
Malware in sbrugna...
EUVD-2024-54702
Malicious code in bioql PyPI...
CVE-2024-51978
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP...
CVE-2024-51982 Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non...
CVE-2024-51982
CVE-2024-51982: Unauthenticated attacker on TCP port 9100 can send Printer Job Language (PJL) commands to crash the target device (then reboot) and can repeat the crash. Root cause cited: malformed FORMLINES (non-numeric value). Affected models span Brother devices and additional vendors in the c...
CVE-2024-51982 Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non...
Brother Industries Multiple driver installers for Windows 安全漏洞
Brother Industries Multiple driver installers for Windows is a driver software from Brother Industries, Japan. A security vulnerability exists in Brother Industries Multiple driver installers for Windows, which can be exploited by an unauthenticated attacker to crash the target device via a PJL...
CVE-2024-51982: Improper Validation of Syntactic Correctness of Input
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non...
CVE-2018-16709
Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands...
ghostscript bug fix update
An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...
Dell Printer Detection (PJL)
Printer Job Language PJL based detection of Dell printer devices. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Brother Printer Detection (PJL)
Printer Job Language PJL based detection of Brother printer devices. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Fuji Xerox / Fujifilm Printer Detection (PJL)
Printer Job Language PJL based detection of Fuji Xerox / Fujifilm printer devices. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...
(Pwn2Own) Lexmark MC3224i PJL Exposed Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PJL commands. The issue results from an exposed...
Kyocera Printer Detection (PJL)
Printer Job Language PJL based detection of Kyocera printer devices. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Lexmark Printer Multiple Vulnerabilities (Jan 2022)
Multiple Lexmark printer devices are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...