CUPS-CVE-2024-47176

CVE-2024-47176 脆弱性スキャナー for CUPS CUPS（Common Unix Printing System） を実行しているシステムに対して CVE-2024-47176 の脆弱性をスキャンするシンプルなツールです。この脆弱性は、ポート631上の Internet Printing Protocol IPP を通じてリモートコード実行（RCE）を引き起こす可能性があります。 機能 自動スキャン : 脆弱なCUPSインスタンスを検出するために、細工されたUDPパケットを送信します。 マルチスレッドスキャン : 複数のIPアドレスを同時に効率的にスキャンします。...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS 详细漏洞分析和Exploit编写过程已经发表在安全客上： http://bobao.360.cn/learning/detail/3644.html C Exploit中，少一个printf打印最后的color数组，可以自行添加，也可直接用debug调试观察内存泄露 JS Exploit已经更新一个可以直接打印bitmap的版本...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba 印刷ジョブ名コマンドインジェクション 概要 CVE-2026-4480 は、外部印刷コマンドを使用する特定の Samba 印刷設定に影響を与えるコマンドインジェクションの脆弱性です。 この脆弱性は、Samba がユーザー制御の印刷ジョブメタデータをシェルコマンドに挿入する際に、シェルメタ文字を適切にエスケープしないために発生します。特定の設定では、攻撃者が悪意のある印刷ジョブ名を提供することで、サーバー上で任意のコマンドを実行させることができます。...

CVE-2024-47176

PoC: cups-browsed 上的未认证远程代码执行 📜 漏洞信息 发布日期 : 2024-09-26 基础评分 : 5.3 中等 EPSS评分 : 0.06% 利用概率 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 描述 : CUPS 是一个基于标准、开源的打印系统，而 cups-browsed 包含网络打印功能，包括但不限于自动发现打印服务和共享打印机。cups-browsed 绑定到 INADDRANY:631，使其信任来自任何来源的任何数据包，并可能导致 Get-Printer-Attributes IPP...

Rocky Linux 8 [CIQ] Security Update: tcpdump / tcpdump-debuginfo / tcpdump-debugsource Multiple Vulnerabilities (crlsa-2020_4760)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204760 advisory. tcpdump: SMB data printing mishandled CVE-2018-10103 tcpdump: SMB data printing mishandled CVE-2018-10105 tcpdump: Out of bounds read/write in getnextfile ...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1780510989)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780510989 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1780510989)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780510989 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured wit...

CentOS Linux 8 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (CENTOS-STREAM8:CLSA-2026:1780503645)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1780503645 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured...

CentOS Linux 8.5 [TuxCare] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.5:CLSA-2026:1780943682)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780943682 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782213578)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782213578 advisory. - A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability...

AlmaLinux 9.2 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782483693)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782483693 advisory. - A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1780662711)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780662711 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2026:1780947657)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780947657 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

Rocky Linux 9.6 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787149537)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787149537 advisory. - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously prin...

CentOS Linux 8.4 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.4:CLSA-2026:1780478501)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1780478501 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

CVE-2026-95319

A flaw was found in chromium-browser. A use-after-free memory corruption flaw in the printing component allows a remote attacker who has already compromised the renderer process to escape the browser sandbox and potentially execute arbitrary code on the host system. To exploit this vulnerability,...

DEBIAN-CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95319

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95319

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95319

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...