CVE-2023-26067

CVE-2023-34362 通过滥用影响 Lexmark 打印机的命令注入漏洞 CVE-2023-26067，实现凭据转储、反向 Shell 和播放音乐的 POC。 技术分析 该漏洞的技术根因分析可在我们的博客上查看： https://www.horizon3.ai/lexmark-command-injection-vulnerability-zdi-can-19470-pwn2own-toronto-2022 摘要 此 POC 滥用命令注入漏洞，以 httpd 用户身份获取 Shell 转储明文 Active Directory 服务凭据与本地凭据 root@kitploit:...

Brother Printers – Authentication Bypass via Default Admin Password

By leaking a target device's serial number, a remote attacker can generate the target device's default administrator password. The target device may leak its serial number via unauthenticated HTTP, HTTPS, IPP, SNMP, or PJL requests. id: CVE-2024-51978 info: name: Brother Printers – Authentication...

Sharp Multifunction Printers - Cookie Exposure

It was observed that Sharp printers are vulnerable to a listing of session cookies without authentication. Any attacker can list valid cookies by visiting a backdoor webpage and use them to authenticate to the printers. id: CVE-2024-33610 info: name: Sharp Multifunction Printers - Cookie Exposure...

lexmark

Lexmark 打印机相关 这个仓库包含了我公开发布的所有与 Lexmark 打印机相关的工作。 你们中的大多数人可能是冲着固件解密工具来的；请查看 tools 文件夹。 exploit 文件夹包含了我开发的一个（在当时属于）0day 漏洞利用，它似乎影响了超过 100 种不同的 Lexmark 打印机型号。这个漏洞利用最初是为 Pwn2Own Toronto 2022 开发的，并在实际比赛期间神奇地失败了。ZDI 无论如何都提出要以一个可笑的金额购买这些漏洞，而我很快就忘了他们的报价。 和往常一样：所有内容均按原样分发，不要期待支持/更新。 尽情享用！ -- blasty...

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

SIGINT_THROUGH_BROTHER_PRINTERS

SIGINTTHROUGHBROTHERPRINTERS 我的工具包，用于通过存在漏洞的打印机收集数据。以CVE 2017-7588作为入口访问，需要为自定义固件开发植入体，未来某天可能会用它来模拟网络攻击。...

CVE-2026-39047

PrintHack - 打印机安全测试工具 root@kitploit: | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 免责声明 ：本工具仅用于合法的安全测试 和教育目的 。请负责任地使用，且仅限用于您拥有或已获得明确授权测试的系统。 🎯 功能特性 核心能力 🔌 原始套接字打印 - 通过端口 9100 与打印机直接通信 📄 PCL 载荷投递 - 发送打印机命令语言（PCL）载荷 🖼️ 数据外泄标记 - 将图像打印为 ASCII 艺术以用于隐蔽信道 💣 打印炸弹（DoS） - 发送海量载荷以测试打印机韧性 🎯 批量打印...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, there was a use-after-free vulnerability in the CUPS scheduler cupsd when temporary printers were automatically deleted. The cupsdDeleteTemporaryPrinters function i...

Astra Linux – Vulnerability in cups-filters

“cups-filters” contains backends, filters, and other software necessary to enable the “cups” printing service on operating systems other than macOS. If you use the “Backend Error Handler” beh to create an accessible network printer, this security vulnerability could lead to remote code execution...

EUVD-2026-60359

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...

CVE-2026-18243

Certain HP DesignJet products may be potentially vulnerable to cross-site scripting XSS, which may allow unauthenticated HTTP requests to view print job previews...

CVE-2026-63563

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-60011

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

CVE-2026-63563

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

EUVD-2026-52251

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

EUVD-2026-52250

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-63545

CVE-2026-63545 affects Sharp and Toshiba Tec MFPs (printers); data cached during printing may remain uncleared and be readable by subsequent users. CVSS metrics show LOW severity (2.4) for both 4.0 and 3.1 vectors. No exploitation details or remediation are specified in the provided documents.