PaperCut MF/NG Improper Access Control Vulnerability
CVSS Skor
—
EPSS İhtimal
%100.0
Risk Skoru
—
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
PaperCut NG/MG 22.0.4 - Authentication Bypass
Nuclei: PaperCut - Unauthenticated Remote Code Execution
PaperCut NG/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated session elevation, and dynamic command injection via the print scripting engine. Designed for security auditing and authorized penetration testing.
CVE-2023-27350, CVE-2023-27351 - PaperCut - Draft or TODO
imancybersecurity/CVE-2023-27350-POC
This exploit is based on CVE-2023-27350 and was built upon the original exploit by horizon3ai and the Metasploit module.
Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class.
rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability
Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms.
İlgili Benzer Açıklar
PaperCut MF/NG: Authentication Bypass
Improper authentication in PaperCut NG
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
PaperCut NG/MF: Remote Code Execution via Scan2Fax
PaperCut NG/MF: Insufficient brute-force protection
PaperCut NG/MF: User enumeration via timing attack
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27350"