Bematech Printer MP-4200 - Denial of Service

Bematech Printer MP-4200 - Denial of Service Exploit Title: Bematech Printer MP-4200 - Denial of Service Date: 2019-11-11 Exploit Author: Jonatas Fil Vendor Homepage: https://www.bematech.com.br/ Software Link: https://www.bematech.com.br/produto/mp-4200-th/ Version: MP-4200 TH Tested on: Windows...

Bematech Printer MP-4200 - Denial of Service Vulnerability

Exploit Title: Bematech Printer MP-4200 - Denial of Service Exploit Author: Jonatas Fil Vendor Homepage: https://www.bematech.com.br/ Software Link: https://www.bematech.com.br/produto/mp-4200-th/ Version: MP-4200 TH Tested on: Windows and Linux CVE : N/A DoS Poc:...

Bematech Printer MP-4200 - Denial of Service

Exploit Title: Bematech Printer MP-4200 - Denial of Service Date: 2019-11-11 Exploit Author: Jonatas Fil Vendor Homepage: https://www.bematech.com.br/ Software Link: https://www.bematech.com.br/produto/mp-4200-th/ Version: MP-4200 TH Tested on: Windows and Linux CVE : N/A DoS Poc:...

Code injection

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

CVE-2019-6337

CVE-2019-6337 affects HP Inkjet printers via a maliciously crafted print file that can cause the device to assert and emit a core dump to a local device. Public details in HP’s advisory HPSBPI03630 (HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information) confirm a Buffer Overflo...

CVE-2019-14451

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achie...

Command injection

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achie...

PT-2019-13700

Name of the Vulnerable Software and Affected Versions Repetier-Server versions 0.8 through 0.91 Description The issue arises from improper validation of the XML data structure when uploading a new printer configuration. This can be exploited to achieve remote code execution by uploading an...

CVE-2019-14451: Unrestricted Upload of File with Dangerous Type

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achie...

CVE-2019-18203

Consolidated from multiple sources: CVE-2019-18203 affects the Ricoh MP 501 printer. The vulnerability is described as HTML Injection and Stored Cross-Site Scripting in the address-adding functionality, specifically in /web/entry/en/address/adrsSetUserWizard.cgi when using the entryNameIn and Key...

CVE-2019-18203

On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

PT-2019-4150

Name of the Vulnerable Software and Affected Versions Windows Printer Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs due to improper validation of file paths by the Windows Printer Service while loading printer driver...

CVE-2018-1050

A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash. Mitigation Ensure the paramter: rpcserver:spoolss = external is not set in the global section of your smb.conf...

CVE-2019-17184

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges...

CVE-2019-17184

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges...

Design/Logic Flaw

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges...

CVE-2019-17184

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges...

CVE-2019-17184

CVE-2019-17184 affects Xerox AltaLink printers (models B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070) with software versions prior to 101.00x.089.22600. The vulnerability allows privilege escalation due to inadequate protection in the printer software, as documented across multi...

fly-admin-printer Print Manager FLY OS Privilege Escalation

The vulnerability of the fly-admin-printer print manager in the FLY operating system of Astra Linux is related to errors in processing empty tasks, as well as errors in renaming the printer. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain unauthorized...