59 matches found
Trickster-HTB
Trickster Exploitation Report Tricksterについて Tricksterは中程度の難易度を持つLinuxマシンで、複数のサービスにわたって複数の脆弱性が存在します。このレポートでは、これらの脆弱性を悪用してシステム全体を侵害するまでの過程を説明します。 攻撃手順 1. PrestaShopの悪用（CVE-2024-34716） オープンソースのeコマースプラットフォームであるPrestaShopは、customer-thread機能フラグが有効な場合、XSS攻撃に対して脆弱です。...
CVE-2023-47268
PrusaSlicer 任意代码执行 通过使用 .3mf 文件和存在漏洞的 prusaslicer 版本实现权限提升。 确保你可以使用 sudo 运行 prusaslicer。 Linux 1.下载文件 2.修改 exploit.sh 中的 IP 和 PORT 3.确保将 exploit.sh 放在 /tmp 目录中 4.执行以下命令 sudo ./prusaslicer -s evil.3mf 5.Exploit.sh 将以 root 身份执行...
Linux Distros Unpatched Vulnerability : CVE-2023-47268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is...
SUSE CVE-2023-47268
In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported...
CVE-2023-47268
In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported...
EUVD-2020-20993
Malware in sbrugna...
EUVD-2020-20994
Malware in sbrugna...
EUVD-2020-20992
Malware in sbrugna...
EUVD-2020-20996
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-28596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A...
PT-2025-1537
Name of the Vulnerable Software and Affected Versions Prusa PrusaSlicer versions prior to 2.6.2 Description A crafted 3mf project file can lead to arbitrary code execution on a host system during the process of slicing the project and exporting G-code. This issue occurs within the PostProcessor.c...
SUSE CVE-2020-28595
An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2020-28596
A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2020-28598
An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
PrusaSlicer 安全漏洞
PrusaSlicer is a 3D printing data processing software. A security vulnerability exists in PrusaSlicer 2.6.1 and earlier versions, which stems from an arbitrary code execution vulnerability in the g-code export function...
PrusaSlicer 2.6.1 Arbitrary Code Execution
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Date: 16/01/2024 Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and...
PrusaSlicer 2.6.1 - Arbitrary code execution Vulnerability
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and Linux CVE:...
PrusaSlicer 2.6.1 - Arbitrary code execution
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Date: 16/01/2024 Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and...
CVE-2020-28594
A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2020-28594
A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...