15723 matches found
HP Network Node Manager I PMD Buffer Overflow
This module exploits a stack buffer overflow in HP Network Node Manager I NNMi. The vulnerability exists in the pmd service, due to the insecure usage of functions like strcpy and strcat while handling stackoption packets with user controlled data. In order to bypass ASLR this module uses a...
HP System Management Homepage Login Utility
This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...
HP-UX LPD 命令执行漏洞
No description provided by source...
HP System Management Homepage 7.1.2 Local 权限提升漏洞
No description provided by source...
CVE-2013-6335
The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...
Design/Logic Flaw
The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...
HP Service Manager multiple security vulnerabilities
Crossite scripting, unauthorized access, privilege escalation...
XXE Injection in HP Release Control
Hello! I'll give you additional information concerning advisory HP Release Control Authenticated XXE Exploit http://1337day.com/exploit/description/22267. Three different vulnerabilities were used in this exploit for successful attack. For my attack it's needed to use only one vulnerability exact...
HP Release Control XXE vulnerability
Few SSI possibilities...
[security bulletin] HPSBMU03079 rev.1 - HP Service Manager, Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04388127 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04388127 Version: 1 HPSBMU03079 rev....
CVE-2014-2632
Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2014-2633
Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2634
Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...
CVE-2013-6222
Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2634
Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...
CVE-2013-6222
Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...