8438 matches found
CVE-2021-39367
CVE-2021-39367 affects Canon Oce Print Exec Workgroup 1.3.2 and concerns a vulnerability where the host header can be injected. This is documented across multiple sources (NVD and RH Red Hat entries). The vulnerability is described as a host header injection issue; no exploit details or affected ...
CVE-2021-39367
Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...
Canon Oce Print Exec Workgroup 跨站脚本漏洞
Canon Oce Print Exec Workgroup is a software application from Canon Japan. It is a program that displays basic printer information. A security vulnerability exists in Canon Oce Print Exec Workgroup version 1.3.2, which allows an attacker to conduct XSS attacks via the lang parameter...
PT-2021-22570
Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for cross-site scripting XSS attacks via the lang parameter. This means an attacker could potentially inject malicious scripts into the application, affecting users wh...
PT-2021-22569
Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for Host header injection. Recommendations: For Canon Oce Print Exec Workgroup version 1.3.2, consider restricting access to the Host header to minimize the risk of...
CVE-2021-39368: Improper Neutralization of Input During Web Page Generation
Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...
CVE-2021-39367: Improper Encoding or Escaping of Output
Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...
Windows Print Spooler Privilege Escalation
The vulnerability of the Windows Print Spooler in operating systems related to Windows printing is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
The plugin does not enforce nonce CSRF checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link PoC...
Domain Escalation – PrintNightmare
Printers are part of every corporate infrastructure therefore Windows environments they have a number of embedded drivers installed. The Print Spooler spoolsv.exe service is responsible… Continue reading - Domain Escalation - PrintNightmare...
Domain Escalation – PrintNightmare
Printers are part of every corporate infrastructure therefore Windows environments they have a number of embedded drivers installed. The Print Spooler spoolsv.exe service is responsible… Continue reading - Domain Escalation - PrintNightmare...
Metasploit Wrap-Up
Print Driver PrivEsc If you attended DEF CON last week, you may have seen this talk on print driver vulnerabilities from Metasploit community contributor Jacob Baines. In the spirit of Friday the 13th, we're highlighting some of these "print nightmares" again, in the form of two new Metasploit...
Ransomware Gangs Exploiting Windows Print Spooler Vulnerabilities
Ransomware operators such as Magniber and Vice Society are actively exploiting vulnerabilities in Windows Print Spooler to compromise victims and spread laterally across a victim's network to deploy file-encrypting payloads on targeted systems. "Multiple, distinct threat actors view this...
CVE-2021-36947
Windows Print Spooler Remote Code Execution Vulnerability...
CVE-2021-36947
Windows Print Spooler Remote Code Execution Vulnerability...
CVE-2021-36958
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...
CVE-2021-36936
Windows Print Spooler Remote Code Execution Vulnerability...
CVE-2021-34483
Windows Print Spooler Elevation of Privilege Vulnerability...