CVE-2024-2397: Loop with Unreachable Exit Condition

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21...

The vulnerability of the Printer Device service in the Avalanche mobile device management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Printer Device service in the Avalanche mobile device management system is related to errors in the configuration of Apache Derby, which is used by the printing device service. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the update utility for microprogrammed printing systems from HP DeskJet allows a hacker to execute arbitrary code.

The vulnerability of the printer software update utility for HP DeskJet is related to an uncontrolled search path element. Exploiting this vulnerability could allow a hacker to execute arbitrary code using a specially crafted DLL file...

PT-2024-22129 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo Printers affected versions not specified Description: A denial of service issue was reported in some Lenovo Printers, allowing an attacker to cause the device to crash by sending crafted LPD packets. Recommendations: At the moment, the...

Lenovo Printer 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Printer that originates from allowing an attacker to cause the device to crash by sending a crafted LPD packet...

Lenovo Printer 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo. A security vulnerability exists in Lenovo Printer, which originates from a buffer overflow vulnerability in the HTTPS service, which could result in a system reboot...

Lenovo Printer 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Printer that originates from allowing an unauthenticated attacker to reboot the printer without authentication...

Lexmark Printer RCE Vulnerability (CVE-2023-50739)

Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...

BizPrint < 4.5.4 - Printer Settings Update via CSRF

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation within printer management. This makes it possible for unauthenticated attackers to modify printer settings and potentially perform other unauthorized actions via a forged request grante...

Zebra ZTC GK420d 跨站脚本漏洞

The Zebra ZTC GK420d is a desktop printer from Zebra. A cross-site scripting vulnerability exists in the Zebra ZTC GK420d version 1.0, which originates from unknown code in file /settings in the component Alert Setup Page, leading to cross-site scripting via the parameter Address...

The vulnerability of HP OfficeJet Pro printer’s microprogramming software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of HP OfficeJet Pro printer’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2024-2209

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

CVE-2024-2209 HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

CVE-2024-2209 HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

CVE-2024-2209

A security vulnerability exists in the HP printer’s Firmware Update Utility (FUU) bundle, specifically affecting certain HP DeskJet printers. The root cause is an uncontrolled search path element that allows a user with administrative privileges to place a compromised DLL file with the same name ...

PT-2024-2665 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: HP Printer's Firmware Update Utility FUU bundle affected versions not specified Description: The issue is related to an uncontrolled search path element in the HP printer's Firmware Update Utility FUU bundle. A user with administrative...

CVE-2024-2209: Improper Control of Generation of Code

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

HP OfficeJet Pro 安全漏洞

HP OfficeJet Pro is an all-in-one printer from Hewlett-Packard HP. A security vulnerability exists in HP OfficeJet Pro that originates from a possible denial-of-service attack when an incorrect eSCL URL GET request is used...

Certain HP OfficeJet Pro Printers - Potential Denial of Service

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request. Update your printer firmware...

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

A new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT. Israeli cybersecurity company Perception Point is tracking the activity under the moniker Operation PhantomBlu. "The PhantomBlu operation introduces a nuanced exploitati...