0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 加入 t.me/SpiderzTM Shodan 和 FOFA Dorks 使用以下 Dorks 查找可能存在漏洞的系统： Shodan Dorks: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 FOFA Dorks: app="Toshiba-e-Studio" title="Toshiba e-Studio" port="8080"...

qiomem

Beschreibung Beliebige physische Speicher-Lese-/Schreibzugriffe über den Toshiba-Treiber qiomem.sys aus Ring 3 funktioniert nur bis zu 4 GB physische Adressen. Driver wird über den Microsoft Update-Katalog verteilt. Andere Varianten. Nicht in der Microsoft Vulnerable Driver List enthalten, es wur...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: toshibahaps: Fixed memory leaks in the add/remove routines. - toshibahapsadd leaks the haps object allocated by it if an error occurs after successfully allocating that object. - toshibahapsremove does not free t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: toshibaacpi – Fixed array out-of-bounds access. In order to use toshibadmiquirks together with the standard DMI-related functions, it is necessary to end the list with an empty entry. Since this entry is missing, an...

Multiple vulnerabilities in Sharp and Toshiba Tec MFPs

Overview Sharp and Toshiba Tec MFPs multifunction printers contain multiple vulnerabilities listed below. User authentication can be bypassed with crafted URLs CWE-425 - CVE-2026-60011 Incomplete cleanup of cached files CWE-459 - CVE-2026-63545 Insecure initial configuration CWE-1188 -...

CVE-2026-63563

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-60011

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

CVE-2026-63563

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

CVE-2026-63563

Sharp and Toshiba Tec MFPs shipped for a market with the user authentication feature disabled by default. When used with this initial configuration, address book editing and Document Filing features can be accessed without authentication, potentially exposing sensitive configuration data. The aff...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-63545

CVE-2026-63545 affects Sharp and Toshiba Tec MFPs (printers); data cached during printing may remain uncleared and be readable by subsequent users. CVSS metrics show LOW severity (2.4) for both 4.0 and 3.1 vectors. No exploitation details or remediation are specified in the provided documents.

EUVD-2026-52250

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-60011

CVE-2026-60011 affects Sharp and Toshiba Tec MFPs. The issue is improper authorization that could allow direct access to certain image data stored on the affected devices via a network request. According to the provided metrics, CVSSv3.1 base score is 5.3 (MEDIUM) with low confidentiality impact,...

CVE-2026-60011

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

CVE-2026-60011

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

EUVD-2026-52249

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

EUVD-2026-39190

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory...

CVE-2026-56129

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory...