Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-23594

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724_r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes.

CVE
#vulnerability#web#pdf#auth

%PDF-1.7 %���� 1 0 obj <>/Metadata 40 0 R/ViewerPreferences 41 0 R>> endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 11 0 R 12 0 R] /MediaBox[ 0 0 612 792] /Contents 4 0 R/Group<>/Tabs/S/StructParents 0>> endobj 4 0 obj <> stream x��Xmo�6�n����b���RQH��۰]ct�b�e��ȞD�Ϳ�%Nm!qB `��(�sw�=<%:�m9ׅ%o�D’������e4Y��D����>�EYi[���b3�8���3S�}KN���� �1�匓��pU9’��|E���t2D�a�ƒL���u1aDqsI�Lh���5�{�Ȣ�=���e�wˀ�_�����v�c8x�4,"��$�q�te����w�����h�9G�/u�Dѡ�_�H|$JNX�"�,pF�<��A�dR��&L�lq[�I�p ��H�84��95G2�|~�k}���i� ����2� !���2�1�0 ��C’8�,����$I.}�KS�����K����<},Ni �T��|�d�^�lOW�?�K�.���wR�i@��^�"0�- ����`�)�`�Loֺip�| e���e&�����/�&�ڲ"����o�,0SR,K��mg݃7��5� �o��l���ڡ� �TO�Gƿ&� ~��_��u�!��J�f!B����C&�kX��8� v�9�(O�pC�7u�b;��g�Ŋ�>� �A1qn$�n������^����� e4鳃�W�B�-?������2"i3Rΰ6��=1�P5.?�ki�{b�����p��K˵&S[d�����v��, �Pٛ�.��Ē� T�7�Ǯ&���&y��U������7��>S����}�I�� ��3]� A3�rG.�5h:h����%�]+��Ν�: 4��9�n�dG� 2̑m�D(��7�� v �i��D#KC6k�c��9=�aCt����w����4�݁"\ �@h�@.�g�1ݠ�i���\�����G�7���[����?I.@X������TȌ�xTr��3;l��h���k�v$�,�����ZWw�L<�R��[��1����UA��6�{�m���n-f���5�"��m�(L[ڠ�j�9�(��q��X8�׻3���F�� �S���K�آ�78|<� j|�(��z��#R�z��`ُ��I��T�A�4�\�x������a�+��YW�dz|���=��Үe��7�� �H�:��%���N�ewfnn�y���K�jlg�;va��&�z�^ƩdO��O�g U�)F1x�j_���$ hJ��O׋S�7݃_�[O8���I�<��3�����x¨ʞb�u�(C���H��e*Z��7;����S�dݗľ�� Wf�� endstream endobj 5 0 obj <> endobj 6 0 obj <> endobj 7 0 obj <> endobj 8 0 obj <> endobj 9 0 obj <> endobj 10 0 obj <> endobj 11 0 obj <>/F 4/A<>/StructParent 1>> endobj 12 0 obj <>/F 4/A<>/StructParent 2>> endobj 13 0 obj <> endobj 21 0 obj <> stream x��T�n�0}���?p|��HU��m���RD�������$1 Fj���8���$�Ǔ9�̌ǡ �� p`h(�����hI` �0$.8�D� B�9��) � $Eg2��)D�1DIT@K��$B’Z �)�L�0�(��2r��$%��L�7������}� 2�B��h ���^_}ƌ� �r��/��cH���Ϙ����5���iӍ*����d�"�SV�{K�Su�K_–�)Qyn��*�L�*~i�oggf �D+8����Z�2�������h�wf�+ti{=�G�ɘ�� ��~�^�z�n�=פ�zl�%c��g�qw�n��Pսu׷�n���m����w� �r��j2t��rq�L0tf�H��

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907