133 matches found
CVE-2015-4800
CVE-2015-4800 affects Oracle MySQL Server 5.6.26 and earlier; an unspecified vulnerability in the Server : Optimizer could allow remote authenticated users to affect availability. Remediation in the connected advisories: upgrade to a newer MySQL 5.6.x (e.g., 5.6.30) where the package rh-mysql56-m...
HP LoadRunner magentproc.exe Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
HP LoadRunner magentproc.exe Stack Buffer Overflow (CVE-2013-4800)
A stack buffer overflow vulnerability has been detected in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the magentproc.exe. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to...
CVE-2013-4800
creationtimestamp| type| source ---|---|--- 2013-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28809 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hploadrunnermagentproc.rb 2025-02-06 03:13:41+00:00...
HP LoadRunner magentproc.exe Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP LoadRunner magentproc.exe Overflow...
HP LoadRunner magentproc.exe Overflow
This module exploits a stack buffer overflow in HP LoadRunner before 11.52. The vulnerability exists on the LoadRunner Agent Process magentproc.exe. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use...
CVE-2013-4800
CVE-2013-4800 affects HP LoadRunner (pre-11.52). The vulnerability is tied to the LoadRunner agent process magentproc.exe and is described as a stack buffer overflow during SSL communication, caused by insufficient validation of a length value. A remote, unauthenticated attacker could exploit thi...
CVE-2011-4800
CVE-2011-4800 affects Serv-U FTP Server up to 11.1.0.4. It is a directory-traversal flaw where a back-to-front path use ("..:/") in LIST, PUT, or GET commands enables remote authenticated users to read/write arbitrary files and list/create directories. Public exploits have been noted; CVSS ~9.0 (...
KLA10322 RLF & WLF vulnerabilities in Serv-U
A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...
CVE-2011-4800
creationtimestamp| type| source ---|---|--- 2011-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18182...
CVE-2010-4800
CVE-2010-4800 affects BaconMap 1.0 and is a SQL injection vulnerability in doadd.php via the type parameter. Public records (NVD/NVD mirror, OpenVAS) describe that remote attackers can execute arbitrary SQL commands, leading to data compromise. The OpenVAS entries additionally identify a broader ...
CVE-2010-4800
creationtimestamp| type| source ---|---|--- 2010-10-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15233...
Default credentials
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
Design/Logic Flaw
Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...
Design/Logic Flaw
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...
CVE-2010-0595
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
CVE-2010-0596
CVE-2010-0596 affects Cisco Network Building Mediator (NBM) and legacy Richards‑Zeta Mediator 2500 environments running Mediator Framework releases prior to 3.1.1. Affects NBM-2400/NBM-4800 and Mediator Framework components; described vulnerability allows remote authenticated users to read or mod...
CVE-2010-0598
CVE-2010-0598 affects the Cisco Network Building Mediator (NBM-2400/NBM-4800) and the Richards-Zeta Mediator 2500, where HTTP sessions from operator workstations are not encrypted, allowing a remote attacker to sniff credentials of administrators. The vulnerability is one of multiple related issu...
CVE-2010-0597
CVE-2010-0597 affects Cisco Network Building Mediator (NBM) products via the Mediator Framework. Vulnerable are Cisco NBM-2400/4800 and Richards‑Zeta Mediator 2500 firmware releases: Mediator Framework 1.5.x before 1.5.1.build.14-eng, 2.2.x before 2.2.1.dev.1, and 3.0.x before 3.0.9.release.1. An...
CVE-2009-4800
The CVE-2009-4800 entry describes a directory traversal vulnerability in Sysax Multi Server versions 4.3 and 4.5 . It allows remote authenticated users to delete arbitrary files via a “..//” sequence in a DELE command, indicating a flaw in path handling during FTP-like file operations. The availa...