HP LaserJet Printer SNMP Enumeration

This module allows enumeration of files previously printed. It provides details as filename, client, timestamp and username information. The default community used is "public". This module requires Metasploit: https://metasploit.com/download Current source:...

HP LaserJet Pro Printers Unauthorized Data Access

Binary data hplaserjetprodataaccess.nbin...

Researchers: Millions of Printers Vulnerable to Attack

Columbia University researchers say tens of millions of printers may have flawed firmware that could allow hackers to remotely set fires, erase code and infiltrate computer networks, according to a report on MSNBC’s Red Tape Chronicles blog today. Research conducted in the Computer Science...

Millions of printers open to devastating hack attack

Millions of printers open to devastating hack attack Could a hacker from half-way around the planet control your printer and give it instructions so frantic that it could eventually catch fire? Or use a hijacked printer as a copy machine for criminals, making it easy to commit identity theft or...

Brother HL-5370DW series auth bypass printer flooder

Exploit for hardware platform in category dos / poc Exploit Title: Brother HL-5370DW series auth bypass printer flooder Google Dork: CopyrightC 2000-2009 Brother Industries, Ltd. All Rights Reserved. Brother HL-5370DW series Date: 31/05/2011 Author: chrisB Contact : chrisb @ gmx.fr Version: Broth...

RHEL 3 : cups (RHSA-2005:049)

Updated CUPS packages that fixes a security issue are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of Xpdf which also affects the CUPS pdftops filter due to a...

Promiscuous email printing in Canon imageRunner

The Canon iR5000i digital printer and probably other imageRunner models has a somewhat undocumented print-from-email feature. Any text/plain email sent to port 25 on the device will be printed. The MAIL FROM and RCPT TO values are not authenticated or even checked for syntax. There appears to be ...

Lexmark / Dell Printer Unauthenticated Access

The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12236; scriptversion "$Revision: 1.14 $"; scriptcvsdate"$Date: 2013/01/25 01:19:09 $";...

AppSocket Half-open Connection Remote DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that Nessus cannot check if it is really running behind this port. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2001-1039

The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer...

CVE-1999-0564

The connected NS/NVD-derived entry for CVE-1999-0564 is supported by Canon ImageRUNNER SMTP Arbitrary Content Printing details: a Canon ImageRUNNER printer with an SMTP service can receive an email that is printed, enabling an attacker to trigger arbitrary printing or a denial-of-service conditio...

jetdirect.crash.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...