218 matches found
CVE-2025-37164-PoC
CVE-2025-37164 - HPE OneView 未认证 RCE PoC 这是 CVE-2025-37164 的概念验证（PoC）利用程序，该漏洞是 HPE OneView 中的一个严重（CVSS 10.0）未认证远程代码执行漏洞。 免责声明 本软件仅供教育和授权安全测试目的使用。 仅可在您拥有或已获得明确书面许可的系统上使用 未经授权访问计算机系统属于违法行为 作者不对因使用本工具而造成的任何滥用或损害负责 本工具用于受控环境中的防御性安全研究和渗透测试 漏洞详情 CVE ID ：CVE-2025-37164 CVSS 分数 ：10.0（严重） 厂商 ：Hewlett...
Exploit_CVE-2025-37164
ExploitCVE-2025-37164 ! Этот скрипт сделан только в образовательных целях Эксплойт для CVE-2025-37164 Описание : Этот скрипт предоставляет простой эксплойт для CVE-2025-37164, затрагивающего HPE OneView, который можно использовать для проверки уязвимости актива. Использование : root@kitploit: git...
CVE-2025-37164
CVE-2025-37164 HPE OneView에 원격 코드 실행 문제가 존재합니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 OneView title 태그를 매칭하고, JavaScript artifactVersion 변수에서 버전을 추출한 다음, 11.00 미만 버전을 실행 중인 인스턴스를 잠재적으로 취약한 것으로 표시합니다. 참고: 이 템플릿으로 표시된 인스턴스는 잠재적으로 취약할 수 있습니다. 탐지 방법은 버전 5.20-10.20에 Z7550-98077 보안 핫픽스가 적용되었는지 여부를 확인할 수 없으며, 11.0...
A week in security (January 5 – January 11)
Last week on Malwarebytes Labs: pcTattletale founder pleads guilty as US cracks down on stalkerware Are we ready for ChatGPT Health? CISA warns of active attacks on HPE OneView and legacy PowerPoint Lego’s Smart Bricks explained: what they do, and what they don’t Fake WinRAR downloads hide malwar...
CVE-2022-23699
A local authentication restriction bypass vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-23697
A remote cross-site scripting xss vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-23700
A local unauthorized read access to files vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-23698
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-37935
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...
CVE-2019-11992
A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...
CVE-2022-37927
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard OVGD...
CVE-2023-50274
HPE OneView may allow command injection with local privilege escalation...
CVE-2023-50275
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...
CISA warns of active attacks on HPE OneView and legacy PowerPoint
The US Cybersecurity and Infrastructure Security Agency CISA added both a newly discovered flaw and a much older one to its catalog of Known Exploited Vulnerabilities KEV. The KEV catalog gives Federal Civilian Executive Branch FCEB agencies a list of vulnerabilities that are known to be exploite...
CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added two security flaws impacting Microsoft Office and Hewlett Packard Enterprise HPE OneView to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities are listed bel...
HPE OneView RCE (CVE-2025-37164)
The remote HPE OneView appliance is affected by an remote code execution vulnerability. An unauthenticated, remote attacker can exploit this. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable...
Exploit for Code Injection in Hpe Oneview
ExploitCVE-2025-37164 ! This Script is made for educationa...
VulnCheck KEV: CVE-2025-37164
A remote code execution issue exists in HPE OneView...
📄 HPE OneView Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability against Hewlett Packard Enterprise HPE OneView. All versions below 11.00 are vulnerable so long as the vendor supplied hotfix has not been applied, however some VM product versions do not enable the vulnerable...