PaperCut 漏洞列表
共找到 16 个与 PaperCut 相关的漏洞
📅 加载漏洞趋势中...
-
CVE-2023-27350: PaperCut - Unauthenticated Remote Code Execution POC
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987. -
CVE-2023-39143: PaperCut < 22.1.3 - Path Traversal POC
PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables attackers to read, delete, and upload arbitrary files. -
CVE-2023-4568: PaperCut NG Unauthenticated XMLRPC Functionality POC
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. -
CVE-2023-27350: PaperCut - Unauthenticated Remote Code Execution POC
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987. -
CVE-2023-39143: PaperCut < 22.1.3 - Path Traversal POC
PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables attackers to read, delete, and upload arbitrary files. -
CVE-2023-4568: PaperCut NG Unauthenticated XMLRPC Functionality POC
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. -
papercut-log4j-rce: Papercut - Remote Code Execution (Apache Log4j) POC
Papercut is susceptible to Log4j JNDI remote code execution. Papercut is a print management system. -
PaperCut NG 允许运行未经身份验证的 XMLRPC 命令(CVE-2023-4568) 无POC
PaperCut NG是一套下一代打印机控制软件，PaperCutNG允许默认运行未经身份验证的XMLRPC命令。已确认22.0.12及以下版本受到影响，但由于缺乏供应商提供的补丁，后续版本也可能受到影响。成功利用此漏洞可能导致远程代码执行或未经授权访问敏感信息。 -
Papercut NG/MF CVE-2023-39469 代码注入漏洞 无POC
Papercut NG/MF存在代码注入漏洞，该漏洞是由于app接口对用户的请求检验不当造成的。 -
PaperCut NG 未授权XMLRPC命令执行漏洞 无POC
-
PaperCut NG FileUploadAuthenticationFilter 认证绕过漏洞 无POC
-
PaperCut NG SetupCompleted 认证绕过漏洞 (获取session) 无POC
-
PaperCut NG SetupCompleted 认证绕过漏洞 (代码执行) 无POC
-
PaperCut NG SetupCompleted 认证绕过漏洞 (代码执行) 无POC
-
PaperCut NG和MF < 22.1.3路径遍历漏洞(CVE-2023-39143) 无POC
PaperCut MF是一种强大的打印 管理解决方案，可以启用、跟踪、管 理和保护您的打印、复印和扫描。攻击者可利用该漏洞获取服务器敏感信息。 -
PaperCut NG和MF 身份认证绕过漏洞(CVE-2023-27350) 无POC
PaperCut MF是一种强大的打印 管理解决方案，可以启用、跟踪、管理和保护您的打印、复印和扫描。该系统由于访问控制不当，攻击者可以利用此漏洞绕过身份验证并在 SYSTEM 上下文中执行任意代码。