Possibly Related Threads…

curiousmonkey · Sep 27, 2024, 09:26 AM

Just a curious monkey here!

Hawx01 · Sep 27, 2024, 09:39 AM

(Sep 24, 2024, 10:14 AM)thecaptainjohnson Wrote:
connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
https://github.com/OpenPrinting/cups-bro...ed.c#L3994

Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
https://github.com/OpenPrinting/cups-bro...ed.c#L8628
https://github.com/OpenPrinting/libppd/b...tor.c#L353

Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
https://github.com/OpenPrinting/cups-bro...ed.c#L8939
https://github.com/OpenPrinting/cups-fil...rip.c#L983

thank you
hope its usable

isulion · Sep 27, 2024, 09:47 AM

Nice post !
Thank you for your work.

an_d_x · Sep 27, 2024, 10:31 AM

Much appreciated!

j5q · Sep 27, 2024, 10:54 AM

thank you for your work

SyLZ · Sep 27, 2024, 11:18 AM

interesting, thanks for sharing!

lsssk12 · Sep 27, 2024, 11:21 AM

(Sep 24, 2024, 10:14 AM)thecaptainjohnson Wrote:
connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
https://github.com/OpenPrinting/cups-bro...ed.c#L3994

Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
https://github.com/OpenPrinting/cups-bro...ed.c#L8628
https://github.com/OpenPrinting/libppd/b...tor.c#L353

Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
https://github.com/OpenPrinting/cups-bro...ed.c#L8939
https://github.com/OpenPrinting/cups-fil...rip.c#L983

cool! I liked it, very interesting

Anti-NATO · Sep 27, 2024, 12:03 PM

thanks for sharing that

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Attempted Scamming | Public Data | https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.

tr1h4rd3r · Sep 27, 2024, 12:14 PM

(Sep 24, 2024, 10:14 AM)thecaptainjohnson Wrote:
connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
https://github.com/OpenPrinting/cups-bro...ed.c#L3994

Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
https://github.com/OpenPrinting/cups-bro...ed.c#L8628
https://github.com/OpenPrinting/libppd/b...tor.c#L353

Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
https://github.com/OpenPrinting/cups-bro...ed.c#L8939
https://github.com/OpenPrinting/cups-fil...rip.c#L983

lets tet it out

autobot_trailbreaker · Sep 27, 2024, 12:56 PM

thank you so much

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	{SECRET} DATABASE OF EXPLOITS	lulagain	468	36,771	Yesterday, 11:24 AM Last Post: msgtuna
	Google Dorks for finding SQL injection vulnerabilities and other security issues	1yush	81	7,353	Sep 17, 2026, 06:52 PM Last Post: npmig
	new wordpress website takeover vuln (video + poc )	zinzeur	321	33,501	Sep 17, 2026, 06:51 PM Last Post: npmig
	0day-RCE-Apache OFBiz	avix	0	965	Sep 11, 2026, 04:02 AM Last Post: avix
	New Zer0 Day Wordpress	A3g00n	89	7,279	Aug 31, 2026, 09:05 PM Last Post: carcino25