LANDesk Lenovo ThinkManagement Console - Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'LANDesk Lenovo ThinkManagement Consol...

CVE-2012-0199

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via 1 a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, 2 the User.updateUserValue functio...

Sql injection

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via 1 a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, 2 the User.updateUserValue functio...

HITB2011KUL - SAPocalypse Now, CrushingSAPs J2EE

Document Title: =============== HITB2011KUL - SAPocalypse Now, CrushingSAPs J2EE References: =========== View: http://www.youtube.com/watch?v=bu6JnwqhRV0 Release Date: ============= 2012-03-05 Vulnerability Laboratory ID VL-ID: ==================================== 469 Discovery Status:...

CVE-2012-1195

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore...

CVE-2012-1196: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the VulCore web service WSVulnerabilityCore/VulCore.asmx in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. dot dot in the filename parameter in a SetTaskLogByFile SOAP request...

CVE-2012-1195: Undefined Security Weakness

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore...

CVE-2012-1195

CVE-2012-1195 affects Lenovo ThinkManagement Console 9.0.3. The flaw is in ServerSetup.asmx under the landesk/managementsuite/core/core.anonymous/ path, where RunAMTCommand with -PutUpdateFileCore enables an unauthenticated remote attacker to upload an ASP payload and access it in the web root, l...

LANDesk Lenovo ThinkManagement Console Remote Command Execution

This module can be used to execute a payload on LANDesk Lenovo ThinkManagement Suite 9.0.2 and 9.0.3. The payload is uploaded as an ASP script by sending a specially crafted SOAP request to "/landesk/managementsuite/core/core.anonymous/ServerSetup.asmx" , via a "RunAMTCommand" operation with the...

VMWare Web Login Scanner

This module attempts to authenticate to the VMWare HTTP service for VmWare Server, ESX, and ESXI This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMWare Web Login Scanner', 'Description' = 'This...

Total Defense Suite UNC Management Console ExportReport SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ExportReport stored procedure, accessed via the management.asmx console. Th...

Total Defense Suite UNC Management Web Service uncsp_ViewReportsHomepage SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uncspViewReportsHomepage stored procedure, accessed via the management.asmx...

CVE-2011-4153

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

Null pointer dereference

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

CVE-2011-4153

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

PT-2012-1814

Name of the Vulnerable Software and Affected Versions PHP version 5.3.8 Description The issue is related to the zend strndup function not always checking its return value, potentially allowing remote attackers to cause a denial of service through a NULL pointer dereference and application crash...

PHP 5.3.8 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.8 Multiple vulnerabilities Author: Maksymilian Arciemowicz Website: http://cxsecurity.com/ Date: 14.01.2012 CVE: CVE-2011-4153 zendstrndup Original link: http://cxsecurity.com/research/103 --- 1. Multiple NULL Pointer Dereference with...

VMware SOAP API Settings

Binary data vmwaresoapsettings.nbin...

Novell eDirectory eMBox Unauthenticated File Access

This module will access Novell eDirectory's eMBox service and can run the following actions via the SOAP interface: GETDN, READLOGS, LISTSERVICES, STOPSERVICE, STARTSERVICE, SETLOGFILE. This module requires Metasploit: https://metasploit.com/download Current source:...

Mandriva Update for libmsn MDVA-2011:081-1 (libmsn)

Check for the Version of libmsn OpenVAS Vulnerability Test Mandriva Update for libmsn MDVA-2011:081-1 libmsn Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...