printix-CVE-2022-29554

CVE-2022-29552 Rilascio semplice | Versione stampabile Una vulnerabilità di "Mishandling of Input to API" o "Exposed Dangerous Method or Function" in PrintixService.exe, in "Printix Secure Cloud Print Management" di Kofax Printix, versione 1.3.1156.0 e precedenti, consente a un attaccante locale ...

CVE-2021-34527-Scanner-Based-On-cube0x0-POC

Questo è uno scanner per il servizio Windows-Print-Spooler a rischio Basato sul PoC della CVE-2021-34527 creato originariamente da cube0x0...

CVE-2026-4480

🚨 CVE-2026-4480 - Esecuzione Remota di Codice Critica nel Sottosistema di Stampa di Samba Esecuzione Remota di Codice RCE Vulnerabilità di Iniezione di Comandi di Stampa in Samba "Un singolo nome di job di stampa non dovrebbe mai diventare un comando shell." 📖 Panoramica CVE-2026-4480 è una...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 1 giugno 2021 CVE-2021-1675 è una vulnerabilità critica di esecuzione remota di codice e di elevazione dei privilegi locali denominata "PrintNightmare". Sono state rilasciate prove di concetto PoC per la capacità di...

CVE-2026-55848

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ivivh26 2026-08-29 00:35:05+00:00| published-proof-of-concept| https://github.com/mapfish/mapfish-print/security/advisories/GHSA-5v29-34h8-v68r 2026-08-29...

CVE-2026-55848

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2025-69216

CVE-2025-69216: OpenSTAManager hat eine SQL-Injection in der Scadenzario-Druckvorlage Überblick...

MapFish Print has XXE that allows reading arbitrary files of certain types

Summary XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs. https://github.com/mapfish/mapfish-print/commit/13020c0fbc299e5f604e4e66066311c4bf04d507 Details To trigger the XXE it is required to host a remote script and dtd file. When using...

CVE-2026-55848 mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2026-55848

MapFish Print (a component of the MapFish cartographic printing platform) is vulnerable to XML External Entity (XXE) injection in versions prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5. The vulnerability exists in the /api/print3/print endpoint, where an attacker-controlled GML layer URL...

EUVD-2026-68018

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2026-55848 mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2021-1675-PrintNightmare-Analysis

Schwachstellenforschung: Lokale Rechteausweitung und RCE über Windows Print Spooler PrintNightmare / CVE-2021-1675 Dieses Repository enthält einen detaillierten technischen Bericht Write-up und die Analyse eines Exploit-Konzepts für die kritische Schwachstelle im Windows-Druckwarteschlangendienst...

PrintNightmare

Kritische Sicherheitslücke PrintNightmare CVE-2021-1675, CVE-2021-34527 z.Z. noch keine Lösung von Microsoft Stand 02.07.2021 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Betrifft alle Betriebsystemversionen Server und Client Möglichkeiten Abschalten PrinterSpooler ACL...

printnightmare-detection-lab

PrintNightmare Bedrohungserkennungs- & Incident-Response-Labor CVE-2021-34527 📌 Überblick Dieses Projekt dokumentiert eine End-to-End-Implementierung von Sicherheitsüberwachung, Detection Engineering und Incident Response, die auf PrintNightmare CVE-2021-34527 abzielt. PrintNightmare ist eine...

CVE-2022-30206

CVE-2022-30206 Este é o PoC para CVE-2022-30206. Vulnerabilidade de Elevação de Privilégio do Windows Print Spooler. Introdução Execute as seguintes operações para exclusão arbitrária de arquivos： 1. Execute o addprinter.exe para criar uma impressora e definir o SpoolDirectory em...

CVE-2020-1048

CVE-2020-1048 Una vulnerabilità di elevazione dei privilegi esiste quando il servizio Windows Print Spooler consente in modo improprio la scrittura arbitraria sul file system. Un utente malintenzionato che sfrutta con successo questa vulnerabilità potrebbe eseguire codice arbitrario con privilegi...

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Due mini script per verificare se il servizio PrintSpooler è in esecuzione all'interno della Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 alias PrintNightmare...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC für CVE-2009-0229 "Druckerwarteschlangen-Dateileseschwachstelle" LPE AFR verwandt mit CVE-2020-1048 Details Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC-Datum: 2010-xx-xx Veröffentlichungsdatum: 2020-05-14 erinnert/inspiriert durch...