CVE-2014-7877

Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...

CVE-2014-7877

CVE-2014-7877 affects the HP-UX kernel on HP-UX B.11.31. The vulnerability allows local users to cause a Denial of Service (DoS) via unknown vectors. HP-UX B.11.31 is affected unless the patch PHNE_43814 (or a subsequent patch) is installed. HP Security Bulletin HPSBUX03159 documents the vulnerab...

CVE-2014-7877

Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...

HP Sprinter Tidestone Formula One DefaultFontName Buffer Overflow (CVE-2014-2638)

A code execution vulnerability exists in HP Sprinter. The vulnerability is due to a buffer overflow while handling the DefaultFontName property within the Tidestone Formula One ActiveX control. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to follow a...

HP-UX PHNE_43814 : s700_800 11.31 cumulative ARPA Transport patch

s700800 11.31 cumulative ARPA Transport patch : A potential security vulnerability has been identified in the HP-UX kernel. This vulnerability could allow local users to create a Denial of Service DoS. References: CVE-2014-7877 SSRT101785. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP Operations Agent Remote XSS iFrame Injection

Exploit for multiple platform in category web applications !/usr/bin/python Exploit Title: HP Operations Agent / HP Communications Broker Remote XSS iFrame Injection Date: 10/16/2014 Exploit Author: Matt Schmidt Syph0n Vendor Homepage: www.hp.com Version: HP Operations Manager/Operations Agent /...

HP Operations Agent - Cross-Site Scripting iFrame Injection

HP Operations Agent - Cross-Site Scripting iFrame Injection !/usr/bin/python Exploit Title: HP Operations Agent / HP Communications Broker Remote XSS iFrame Injection Date: 10/16/2014 Exploit Author: Matt Schmidt Syph0n Vendor Homepage: www.hp.com Version: HP Operations Manager/Operations Agent /...

HP Operations Agent - Cross-Site Scripting iFrame Injection

!/usr/bin/python Exploit Title: HP Operations Agent / HP Communications Broker Remote XSS iFrame Injection Date: 10/16/2014 Exploit Author: Matt Schmidt Syph0n Vendor Homepage: www.hp.com Version: HP Operations Manager/Operations Agent / OpenView Communications Broker 11.14 Tested on: Windows 7,...

HP Operations Manager Agent Detection

Binary data 8573.prm...

HP Operations Manager / Operations Agent < 11.13 XSS (HPSBMU03126)

According to its self-reported version, the version of the HP Operations Agent service running on the remote host is affected by a cross-site scripting vulnerability. Operations Agent is often an included component of Operations Manager. C Tenable Network Security, Inc. include"compat.inc"; if...

HP Data Protector - 'EXEC_INTEGUTIL' Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector EXECINTEGUTIL Remote Code Execution', 'Description' = %q This exploit abuses a vulnerability in the HP Data...

HP Data Protector EXEC_INTEGUTIL Remote Code Execution Exploit

This exploit abuses a vulnerability in the HP Data Protector. The vulnerability exists in the Backup client service, which listens by default on TCP/5555. The EXECINTEGUTIL request allows to execute arbitrary commands from a restricted directory. Since it includes a perl executable, it's possible...

HP Data Protector EXEC_INTEGUTIL Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector EXECINTEGUTIL Remote Code Execution', 'Description' = %q This exploit abuses a vulnerability in the HP Data...

CVE-2014-7874

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2647

Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7874

CVE-2014-7874 is a CSRF vulnerability affecting HP System Management Homepage (SMH) on HP-UX. It impacts SMH before 3.2.3 on HP-UX B.11.23 and before 3.2.8 on HP-UX B.11.31, potentially allowing remote attackers to hijack user authentication via unknown vectors. HP attributes the issue to CSRF an...

CVE-2014-2647

CVE-2014-2647 is a remote cross-site scripting (XSS) vulnerability in HP OpenView/OpenView HP Operations Broker/HP Operations Agent (HP Operations Manager) for versions prior to 11.14. The weakness allows an attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface...

CVE-2014-7874

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...