CVE-2025-3079

CVE-2025-3079 : Canon production printers, including Office/Small Office multifunction printers and laser printers, have a passback vulnerability where credential information can be exposed in plain text when configured to communicate with external systems (e.g., SMTP/LDAP). Root cause: insuffici...

CVE-2025-3078

A passback vulnerability which relates to production printers and office multifunction printers...

CVE-2025-3078

A passback vulnerability which relates to production printers and office multifunction printers...

CVE-2025-3078

Canon CVE-2025-3078 affects Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers. The root cause is insufficient protection of credential information, allowing credential data to be sent in plaintext when devices communicate with external systems. Public detai...

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility. "Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience," the company said in a statement...

PT-2025-22115 · Canon · Satera +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A passback vulnerability relates to office or small office multifunction printers and laser printers. Recommendations: At the moment, there is no information about a newer version that...

Canon ImageRunner 安全漏洞

Canon ImageRunner is a series of all-in-one black and white printers from Canon Japan. A security vulnerability exists in Canon ImageRunner that stems from a backport issue with office/small office multifunction printers and laser printers...

PT-2025-22114 · Canon · Satera +7

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A passback vulnerability relates to production printers and office multifunction printers. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

Canon ImageRunner 安全漏洞

Canon ImageRunner is a series of all-in-one black and white printers from Canon Japan. A security vulnerability exists in Canon ImageRunner that stems from a backporting issue in production printers and multifunction printers...

CVE-2025-41393

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...

Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Overview Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs multifunction printers. Web Image Monitor contains the vulnerability listed below. Reflected cross-site scripting CWE-79 - CVE-2025-41393 Juan Pablo Gomez Postigo of Sprocket...

CVE-2025-41393

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...

CVE-2025-41393

Ricoh Web Image Monitor on Ricoh laser printers and MFPs is affected by a reflected XSS (CVE-2025-41393). The issue originates in Web Image Monitor and can allow an attacker to trigger arbitrary JavaScript in the web browser of a user who accesses the monitor. Connected sources (Nuclei template, ...

CVE-2025-41393

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...

CVE-2025-41393

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...

Ricoh Web Image Monitor 跨站脚本漏洞

Ricoh Web Image Monitor is a web management interface for multifunction printing devices from Ricoh Japan that provides remote monitoring and configuration capabilities. A cross-site scripting vulnerability exists in Ricoh Web Image Monitor, which stems from reflected cross-site scripting in lase...

JVN#20474768: Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs multifunction printers. Web Image Monitor contains the vulnerability listed below. Reflected cross-site scripting CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N...

PT-2025-20687

Name of the Vulnerable Software and Affected Versions Ricoh Web Image Monitor affected versions not specified Description A reflected cross-site scripting issue exists in laser printers and multifunction printers MFPs that implement Ricoh Web Image Monitor. This could allow an arbitrary script to...

CVE-2025-32788 OctoPrint Authenticated Reverse Proxy Page Authentication Bypass

OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a vulnerability that allows an attacker to bypass the login redirect and directly access the rendered HTML of certain frontend pages. The primary risk lies in potential...

CVE-2025-32788

CVE-2025-32788 – OctoPrint Up to version 1.10.3, OctoPrint could bypass the login redirect and directly access rendered HTML of certain frontend pages by abusing authentication checks. The issue centers on the frontend authentication flow, notably functions like require_login, require_login_with,...