15756 matches found
CVE-2013-6207
HP SiteScope SOAP loadFileContents vulnerability (CVE-2013-6207) affects SiteScope 10.1x, 11.1x, 11.21. The flaw in handling SOAP requests allows remote, unauthenticated attackers to trigger remote code execution, arbitrary file download, or DoS. ZDI notes exploitation via SOAP endpoints without ...
HP Security Management System未明远程代码执行漏洞
Bugtraq ID:65970 CVE ID:CVE-2013-6201 HP Security Management System是一个惠普公司开发的安全管理系统。 HP Security Management System存在未明错误，允许攻击者利用漏洞执行任意代码。 0 HP Security Management System 3.3.0 HP Security Management System 3.5.0 HP Security Management System 3.6.0 HP Security Management System 3.6.0 patch 1 厂商补丁：...
HP Data Protector Backup Client Service Remote Code Execution Exploit
Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in...
HP-UX PHCO_43843 : s700_800 11.23 m4(1) cumulative patch
s700800 11.23 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...
HP-UX PHCO_43835 : s700_800 11.31 m4(1) cumulative patch
s700800 11.31 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...
HP Data Protector - Backup Client Service Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)
A stack buffer overflow vulnerability exists in HP Application Information Optimizer. The vulnerability is due to insufficient sanitization on the range of the opcode value. A remote unauthenticated attacker can leverage this vulnerability by sending crafted messages to the server...
HP SiteScope 'loadFileContents' SOAP请求远程代码执行漏洞
BUGTRAQ ID: 65972 CVECAN ID: CVE-2013-6207 HP SiteScope是无代理监控软件，可维护其分布式IT 基础架构的可用性和性能。 SiteScope 10.1x, 11.1x, 11.21版本的loadFileContents SOAP功能存在安全漏洞，成功利用后可导致任意代码执行、任意文件下载和拒绝服务。 0 HP SiteScope 11.21 HP SiteScope 11.1x HP SiteScope 10.1x 厂商补丁： HP -- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
HP Integrated Lights-Out (iLO) Default Credentials
The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2013-6201
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
Code injection
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6201
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6201
HP Security Management System (SMS) is affected by CVE-2013-6201 for versions 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2. The Security Bulletin indicates remote execution of arbitrary code could be caused by this vulnerability; the exact exploit vectors are not detailed in the provided...
HP Data Protector Backup Client Service Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
HP Data Protector Backup Client Service Remote Code Execution
This Metasploit module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This Metasploit module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2...
HP Operations Orchestration security vulnerabilities
XSS, CSRF, unauthorized access...
[security bulletin] HPSBMU02964 rev.1 - HP Service Manager, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access, Disclosure of Informa
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04117626 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04117626 Version: 1 HPSBMU02964 rev....
HP Application Information Optimizer security vulnerabilities
Code execution, information disclosure...
[security bulletin] HPSBMU02971 rev.1 - HP Application Information Optimizer, Remote Execution of Code, Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04140965 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04140965 Version: 1 HPSBMU02971 rev....