Sql injection

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

CVE-2019-12193

CVE-2019-12193 affects H3C H3Cloud OS (all versions) and stems from a SQL injection in the ear/grid_event sidx parameter. The Red Hat and NVD records confirm the vulnerable component and issue type as SQL injection, with a high-impact CVSS3 score (9.8, CRITICAL) reflecting network access, no auth...

CVE-2019-12193

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

CVE-2019-12193: Improper Neutralization of Special Elements used in an SQL Command

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

Denial of Service Vulnerability in H3C ER2100n

The H3C ER2100n is an enterprise-class router. A denial of service vulnerability exists in the H3C ER2100n. All UPnP methods of the router can be accessed without authorization. When the input parameter of the UPnP method contains the character "\x00", the UPnP service will crash, and a manual...

H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...

HPE 7.2 - Java Deserialization

HPE 7.2 - Java Deserialization !/usr/bin/env python HPE/H3C IMC - Java Deserialization Exploit Version 0.1 Tested on Windows Server 2008 R2 Name HPE/H3C IMC Intelligent Management Center Java 1.8.091 Author: Raphael Kuhn Daimler TSS Special thanks to: Jan Esslinger @Hngan for the websphere exploi...

HPE < 7.2 - Java Deserialization Exploit

Exploit for java platform in category remote exploits !/usr/bin/env python HPE/H3C IMC - Java Deserialization Exploit Version 0.1 Tested on Windows Server 2008 R2 Name HPE/H3C IMC Intelligent Management Center Java 1.8.091 Author: Raphael Kuhn Daimler TSS Special thanks to: Jan Esslinger @Hngan f...

H3C / HPE Intelligent Management Center PLAT < 7.3 E0506 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is brand...

H3C / HPE Intelligent Management Center accessMgrServlet Java Object Deserialization RCE

Binary data hpimccve-2017-5790.nbin...

H3C / HPE Intelligent Management Center RMI Java Object Deserialization RCE

The H3C or HPE Intelligent Management Center iMC web server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialization of Java objects to the Apache Commons BeanUtils library via the euplat RMI registry. An unauthenticated, remote attacker can...

Unauthorized Access Vulnerability in H3C Voice Gateway

H3C VG voice gateway device is a new generation of voice, fax and data integrated access device developed by H3C for industry and enterprise users. An unauthorized access vulnerability exists in H3C VG 10-40, which allows attackers to obtain sensitive information about the gateway device...

H3C / HPE Intelligent Management Center Java Object Deserialization RCE

Binary data hpimccve-2016-4372.nbin...

H3C MSR20-10 路由器系列弱口令

No description provided by source...

HP Networking Products and H3C Comware Devices Denial of Service Vulnerability

H3C Comware is H3C's core software platform that builds the foundation of its IP network products. A security vulnerability exists in H3C Comware 5/7 devices, which can be exploited by remote attackers to bypass target access restrictions or cause a denial of service through virtual routing and...

CVE-2015-5434

CVE-2015-5434 affects HPE Networking/Comware 5 and 7 (HP/H3C) devices. Multiple connected sources describe a vulnerability where remote, unauthenticated attackers can bypass access restrictions or cause a denial of service by abusing virtual routing and forwarding (VRF) hopping. The root issue is...

CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

CVE-2015-5434: Undefined Security Weakness

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

HP / H3C VPN Firewall Module DoS

No description provided...

CVE-2013-4840

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors...