- Top reward
- $6,049
- Top severity paid
- Critical
- Assets in scope
- 8
- Public CVEs
- 10
- Last change
- No changes yet
At a glance
What to know before you start testing.
- Pays up to $6,049
- for critical bugs.
- Report on Standoff 365
- Submit through the program page.
Rewards
What Standoff 365 lists as the payout for each severity.
| Severity | Relative size | Reward |
|---|---|---|
| Critical |
|
$6,049 |
Reward range in US dollars. Standoff 365's own page has the details.
Scope
8 assets you may test.
Domains 6
- aicups.ru No bounty
- gamescup.ru No bounty
- highloadcup.ru No bounty
- mlbootcamp.ru No bounty
- russiandesigncup.ru No bounty
- tracker.cups.online No bounty
Wildcard domains 2
- *.cups.online
- *.gamescup.ru
Changes
Tracked since 12 Nov 2026. Last checked 15 minutes ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
| CVE | Summary | Severity | Published |
|---|---|---|---|
| CVE-2018-6553 | The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS. | High 8.8 | 10 Aug 2018 |
| CVE-2014-8166 | The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name. | High 8.8 | 12 Jan 2018 |
| CVE-2015-1159 | Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/. | Medium 4.3 | 26 Jun 2015 |
| CVE-2015-1158 | The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary | High 10.0 | 26 Jun 2015 |
| CVE-2008-1722 | Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image. | Medium 4.3 | 10 Apr 2008 |
| CVE-2008-0047 | Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions. | High 9.3 | 18 Mar 2008 |
| CVE-2008-0882 | Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information. | High 10.0 | 21 Feb 2008 |
| CVE-2007-4351 | Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow. | High 10.0 | 31 Oct 2007 |
| CVE-2007-0720 | The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted. | Medium 5.0 | 13 Mar 2007 |
| CVE-2005-4873 | Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c. | High 7.5 | 31 Dec 2005 |