Possibly Related Threads…

aha · Sep 26, 2024, 08:31 PM

Thanks - checking now that details are public, but hey...

asdfqwerty · Sep 26, 2024, 08:31 PM

Interesting, thanks for sharing

gre9 · Sep 26, 2024, 08:35 PM

what a day it has been

MoonLight666 · Sep 26, 2024, 08:39 PM

(Sep 24, 2024, 10:14 AM)thecaptainjohnson Wrote:
connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
https://github.com/OpenPrinting/cups-bro...ed.c#L3994

Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
https://github.com/OpenPrinting/cups-bro...ed.c#L8628
https://github.com/OpenPrinting/libppd/b...tor.c#L353

Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
https://github.com/OpenPrinting/cups-bro...ed.c#L8939
https://github.com/OpenPrinting/cups-fil...rip.c#L983

Holy snap, nice post ahead of the drama

Psychopomp · Sep 26, 2024, 08:42 PM

Nice share. This will be fun to use

h2o2 · Sep 26, 2024, 08:43 PM

Thanks for this

huerfano_leo · Sep 26, 2024, 08:49 PM

thanks for sharing!

BreruNadashi · Sep 26, 2024, 08:50 PM

Quite an insane post

ElDavo · Sep 26, 2024, 08:57 PM

hi mum and everyone else

gcockretta · Sep 26, 2024, 08:57 PM

(Sep 24, 2024, 10:14 AM)thecaptainjohnson Wrote:
connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
https://github.com/OpenPrinting/cups-bro...ed.c#L3994

Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
https://github.com/OpenPrinting/cups-bro...ed.c#L8628
https://github.com/OpenPrinting/libppd/b...tor.c#L353

Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
https://github.com/OpenPrinting/cups-bro...ed.c#L8939
https://github.com/OpenPrinting/cups-fil...rip.c#L983

wow amazing research

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	POC CVE-2025-24071	caca28sapo1	17	1,236	8 hours ago Last Post: Test689
	New Zer0 Day Wordpress	A3g00n	83	4,244	May 11, 2026, 08:17 PM Last Post: j4ng0
	{SECRET} DATABASE OF EXPLOITS	lulagain	441	28,204	May 11, 2026, 05:41 PM Last Post: chiki
	Google Dorks for finding SQL injection vulnerabilities and other security issues	1yush	69	3,787	May 11, 2026, 03:55 PM Last Post: fkmonkey
	CVE-2024-32002 RCE PoC	HA_twck	2	587	May 11, 2026, 01:33 PM Last Post: newxiao1