4392 matches found
Brother HL-5370DW series auth bypass printer flooder
No description provided by source. Exploit Title: Brother HL-5370DW series auth bypass printer flooder Google Dork: CopyrightC 2000-2009 Brother Industries, Ltd. All Rights Reserved. Brother HL-5370DW series Date: 31/05/2011 Author: chrisB Contact : chrisb @ gmx.fr Version: Brother HL-5370DW seri...
HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Lexmark Multiple Laser printer Remote Stack Overflow
No description provided by source. Application: Lexmark Multiple Laser printer Remote Stack Overflow Platforms: Lexmark Multiple Laser printer Exploitation: Remote Exploitable CVE Number: CVE-2010-0619 Discover Date: 2010-01-06 Author: Francis Provencher Protek Research Lab's Website:...
HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution
No description provided by source. $Id: hpeasyprintercarexmlsimpleaccessor.rb 13593 2011-08-20 00:11:22Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Multiple Printer Providers (spooler service) - Privilege Escalation Exploit
No description provided by source...
openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)
"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...
openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)
This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...
openSUSE Security Update : ark (openSUSE-SU-2012:0322-1)
Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed CVE-2011-2725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
openSUSE Security Update : samba (openSUSE-SU-2013:1339-1)
"This update of samba fixed the following issues : - The pamwinbind requiremembershipof option allows for a list of SID, but currently only provides buffer space for 20; bnc806501. - Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections;...
openSUSE Security Update : system-config-printer (openSUSE-2011-89)
Add system-config-printer-subprocess-no-shell.patch: avoid escaping issues when running commands. Fix bnc735322. - Add system-config-printer-no-openprinting.patch: this disables the feature where PPD drivers can be downloaded from OpenPrinting.org. See discussion in bnc733542. As a side-effect,...
HP OfficeJet Printer Detection
Binary data hpofficejetwebdetect.nbin...
HP OfficeJet Printer Heartbeat Information Disclosure (Heartbleed)
According to its self-reported build information, the firmware running on the remote HP OfficeJet printer is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions that could allow an...
Multiple Stored XSS in FOG Image deployment system - FD
Vulnerability title: Multiple Stored Cross-Site scripting CVE: CVE-2014-3111 Vendor: FOG Project Product: FOG Imaging system Affected version: 0.27 – 0.32latest Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- Latest and...
Fog Imaging System 0.32 Cross Site Scripting
Vulnerability title: Multiple Stored Cross-Site scripting CVE: CVE-2014-3111 Vendor: FOG Project Product: FOG Imaging system Affected version: 0.27 0.32latest Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- Latest and...
Ubuntu Update for cups-filters USN-2210-1
Check for the Version of cups-filters OpenVAS Vulnerability Test $Id: gbubuntuUSN22101.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for cups-filters USN-2210-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...
USN-2210-1: cups-filters vulnerability
Sebastian Krahmer discovered that cups-browsed incorrectly filtered remote printer names and strings. A remote attacker could use this issue to possibly execute arbitrary commands. CVE-2014-2707 Johannes Meixner discovered that cups-browsed ignored invalid BrowseAllow directives. This could cause...
USN-2210-1 cups-filters vulnerability
Sebastian Krahmer discovered that cups-browsed incorrectly filtered remote printer names and strings. A remote attacker could use this issue to possibly execute arbitrary commands. CVE-2014-2707 Johannes Meixner discovered that cups-browsed ignored invalid BrowseAllow directives. This could cause...
Canon PIXMA Printer HTTP Detection
Binary data canonpixmaprinterwwwdetect.nbin...
Canon PIXMA Printer WLAN Credential Disclosure
The remote printer contains a flaw that could allow a remote attacker to obtain sensitive information. The HTTP admin interface contains WLAN authentication information WEP/WPA/WPA2 in plaintext. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Canon PIXMA Printer Administration Authentication Bypass
The remote printer contains a flaw that could allow a remote attacker to obtain sensitive information. The HTTP admin interface does not require credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73375;...