CVE-2013-4836

HP Application LifeCycle Management (ALM) Synchronizer is affected by CVE-2013-4836 due to a vulnerability in the GossipService SOAP Request feature prior to version 1.4.2, allowing remote code execution via unknown vectors. The vulnerability exists in the GossipServiceSoapBinding web service and...

CVE-2013-4834: Undefined Security Weakness

Unspecified vulnerability in the client component in HP Application LifeCycle Management ALM before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327...

CVE-2013-4802

CVE-2013-4802 affects HP Application Lifecycle Management (ALM) Quality Center prior to v11.51. The flaw is a cross-site scripting (XSS) vulnerability due to improper sanitization of HTML messages, allowing remote attackers to inject arbitrary JavaScript via unspecified vectors. Exploitation requ...

CVE-2013-4802

Cross-site scripting XSS vulnerability in HP Application Lifecycle Management ALM Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565...

PT-2013-5202

Name of the Vulnerable Software and Affected Versions HP Application Lifecycle Management ALM Quality Center versions prior to 11.51 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on...

CVE-2013-4802: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Application Lifecycle Management ALM Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565...

phpShop 2.0 - SQL Injection

Exploit Title : phpshop 2.0 SQL Injection Vulnerability Author : By onestree Software Link : http://code.google.com/p/phpshop/downloads/list tested : windows 7 / ubuntu Dork : inurl:"tanyakan pada rumput yang bergoyang" SQLi p0c: ================== http://localhost/phpshop...

Memory corruption

Memory leak in Siemens Automation License Manager ALM 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service memory consumption via crafted packets...

CVE-2012-4691

The CVE-2012-4691 issue affects Siemens Automation License Manager (ALM) 4.x and 5.x (up to 5.1/5.2) with a memory leak that can be triggered by crafted packets sent to the ALM service (default port 4410). The underlying impact is denial of service due to memory consumption, potentially affecting...

KLA10084 DoS vulnerability in Siemens ALM

A memory leak was found in Siemens ALM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories Siemens bulletin Exploitation Related products Automation-License-Manager CVE list...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

A directory traversal and file overwrite vulnerability has been reported in the HP Application Lifecycle Management ActiveX control...

HP Application Lifecycle Management ActiveX Control Insecure Method Exposure

An insecure method exposure vulnerability has been reported in HP Application Lifecycle Management ActiveX control. The vulnerability is due to using the node parameter as a pointer to a function pointer when handling a certain method. A remote attacker could exploit this vulnerability by enticin...

HP ALM Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

HP Application Lifecycle Management ActiveX memory ovewritting

Memory overwritting of user-controlled address in XGO.ocx...

CVE-2011-4531

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

Design/Logic Flaw

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...

Null pointer dereference

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4530

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...