CVE-2013-2670

The CVE-2013-2670 entry describes an XSS vulnerability in Brother MFC-9970CDW printers with firmware G (1.03) and L (1.10). The flaw allows remote attackers to inject arbitrary web script or HTML by supplying an arbitrary parameter name via QUERY_STRING to admin/admin_main.html. This is distinct ...

CVE-2013-2671

Summary: CVE-2013-2670, CVE-2013-2671, and CVE-2013-2507 describe cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer family. The NVD entries indicate affected firmware/builds include G (1.03) and L (1.10) across multiple CVEs. Vulnerable components include web UI endpoi...

CVE-2013-2671

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

OSX: the HP printer tool program security vulnerabilities(HP Utility. app)?- Vulnerability warning-the black bar safety net

If you have a“newer”models of the HP Uility. app supported HP printer, then you can easily from the HP Utility program Management section of the printer configuration, this feature is and HP WebJet Admin provides similar functionality, but function a lot less, and is not suitable for the network...

Lexmark Printer config.html Administrator Authentication Bypass

The version of the remote Lexmark printer is potentially affected by a security bypass vulnerability. An input validation error exists related to the webpage 'config.html' and the 'vac.255.GENPASSWORD' parameter that could allow an attacker to change the administrator password to a blank string. ...

Lexmark Printer Configuration Persistent XSS

The version of the remote Lexmark printer is potentially affected by a cross-site scripting vulnerability. An input validation error exists related to the 'General Settings' configuration page and the 'Location' and 'Contact Name' parameters that could allow persistent cross-site scripting attack...

Updated hplip package fixes security vulnerabilities

It was discovered that the HPLIP Polkit daemon incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. CVE-2013-6402 It was discovered that HPLIP contained an upgrade tool that would download code in an unsafe fashion. If a remote attacker...

Microsoft Windows Printer Spooler GetPrinterData Denial Of Service - Ver2 (CVE-2006-6296)

A denial-of-service vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Fedora 20 : qt-4.8.5-15.fc20 (2013-22860)

Qt Project Security Advisory: XML Entity Expansion Denial of Service CVE-2013-4549 See also http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update : - adds support for the aarch64 architecture, - fixes QTBUG-35459, a too low character limit for XML...

Printer Environment Variables Scanner

This module scans for printer environment variables using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Environment...

Printer File Download Scanner

This module downloads a file from a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Download...

Printer Volume Listing Scanner

This module lists the volumes on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Volume Listing...

Printer Version Information Scanner

This module scans for printer version information using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Version Informatio...

Printer Directory Listing Scanner

This module lists a directory on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Directory Listing...

Printer Ready Message Scanner

This module scans for and optionally changes the printer ready message on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class...

Debian Security Advisory DSA 2829-1 (hplip - several vulnerabilities)

Multiple vulnerabilities have been found in the HP Linux Printing and Imaging System: Insecure temporary files, insufficient permission checks in PackageKit and the insecure hp-upgrade service has been disabled. OpenVAS Vulnerability Test $Id: deb2829.nasl 6611 2017-07-07 12:07:20Z cfischer $...

libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2013:1542 Updated samba packages that fix three security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

samba security, bug fix, and enhancement update

3.6.9-164 - resolves: 1008574 - Fix offline logon cache not updating for cross child domain group membership. 3.6.9-163 - resolves: 1015359 - Fix CVE-2013-0213 and CVE-2013-0214 in SWAT. 3.6.9-162 - resolves: 978007 - Fix 'valid users' manpage documentation. 3.6.9-161 - resolves: 997338 - Fix...

RedHat Update for samba4 RHSA-2013:1543-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for update (openSUSE-SU-2013:1339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...