HP Intelligent Management Center BIms UploadServlet - Directory Traversal (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Apache-Coyote/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initializeinfo = superupdateinfoinfo,...

CVE-2013-4822

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

CVE-2013-4822

CVE-2013-4822 affects HP Intelligent Management Center (iMC) Branch Intelligent Management System (BIMS) UploadServlet. The vulnerability is described as an unauthenticated file-upload vulnerability in the BIMS module, enabling remote attackers to upload arbitrary files and potentially execute ar...

[security bulletin] HPSBGN02929 rev.1 - HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Module (BIMS), and Comware Based Switches and Routers, Remote Code Execution, Disclosure of Informati

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943425 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943425 Version: 1 HPSBGN02929 rev....

CVE-2012-4822

CVE-2012-4822 affects IBM JRE components used in IBM WebSphere Real Time and multiple IBM/Tivoli products (e.g., Tivoli Monitoring, Rational Host On-Demand, WebSphere Real Time, Lotus Notes/Domino). Root cause: insecure use of multiple methods in java.lang.Class enabling remote code execution. Af...

Critical: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2010-4822

CVE-2010-4822 affects SilverStripe 2.4.x up to 2.4.3 (before 2.4.4). When the site runs in “live mode,” remote attackers can obtain the underlying SQL queries for a page through the showqueries and ajax parameters in core/model/MySQLDatabase.php. The issue is documented consistently across multip...

CVE-2011-4822

CVE-2011-4822 involves multiple cross-site scripting (XSS) vulnerabilities in the Atlassian FishEye user profile feature prior to version 2.5.5. The issue allows remote attackers to inject arbitrary web script or HTML via two vectors: (1) snippets in a user comment that are not properly sanitized...

CVE-2009-4822

CVE-2009-4822 affects Kasseler CMS 1.3.4 via XSS in index.php, exploitable through parameters (do, id, uname). The NVD entry documents multiple XSS vulnerabilities that allow remote script/HTML injection; impact listed as Partial integrity with no confidentiality/availability impact, and no authe...

CVE-2009-4822

creationtimestamp| type| source ---|---|--- 2009-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33424...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities

Binary data 4760.prm...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Windows)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Windows Authors: Chandan S Copyrigh...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Linux)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Linux Authors: Chandan S Copyright:...

CVE-2008-4822

Adobe Flash Player/Flash plugin is affected by CVE-2008-4822, which describes a flaw in interpreting policy files that could bypass a non-root domain policy. Public advisories (e.g., RHSA-2008-0980 for Red Hat systems and GLSA-2009-03-23 for Gentoo) note that Flash policy interpretation issues we...

openSUSE 10 Security Update : gvim (gvim-4822)

Vim allows to open content via external programs if the argument contains a 'http:' sub-string. It insecurely invoked external web browsers to fetch the remote content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2007-4822

Cross-site request forgery CSRF vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as...