CVE-2017-12533

The CVE-2017-12533 issue affects HPE Intelligent Management Center (iMC) PLAT, specifically PLAT 7.3 (E0504) with a Remote Code Execution vulnerability resolved in PLAT v7.3 (E0506) or later. Connected sources identify a broader family of RCE flaws in iMC PLAT related to an Expression Language/be...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

CVE-2017-8957

An RCE vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.2. The flaw exists in the dbman service, which by default listens on TCP port 2810. It results from improper validation of a user-supplied string before it is used to execute a system call, enabling an u...

CVE-2017-12498

CVE-2017-12498 is a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. The issue affects iMC PLAT version 7.3 (E0504) and is fixed in PLAT v7.3 (E0506) or later. The public description identifies a vulnerability in the HPE iMC PLAT li...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2016-8529

A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-8946

A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found...

CVE-2017-12542

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 iLO 4 version prior to 2.53 was found. Recent assessments: noraj at March 06, 2022 8:11pm UTC reported: I found many many servers, during penetration testing, on corporate environment that have an integrate...

HPE iLO4 Add New Administrator User

!/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP: https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769enus Other...

HPE iLO4 < 2.53 - Add New Administrator User Exploit

Exploit for multiple platform in category remote exploits !/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP:...

CVE-2017-17482

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is...

HPE Integrated Lights-Out 4 Remote Code Execution Vulnerability(CVE-2017-12542)

Subverting your server through its BMC: the HPE iLO4 case ========================================================= Introduction ------------ iLO is the server management solution embedded in almost every HP servers for more than 10 years. It provides every feature required by a system...

HPE iLO 4 < 2.53 - Add New Administrator User

!/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP: https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769enus Other...

HPE iLO 4 2.53 - Add New Administrator User

HPE iLO 4 2.53 - Add New Administrator User !/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP:...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03952)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

HPE iMC 7.3 - RMI Java Deserialization

HPE iMC 7.3 - RMI Java Deserialization Exploit Title: HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability Date: 01-28-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HPE iMC 7.3 - RMI Java Deserialization

Exploit Title: HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability Date: 01-28-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HPE iMC 7.3 - RMI Java Deserialization Exploit

Exploit for windows platform in category remote exploits Exploit Title: HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HPE iMC 7.3 RMI Java Deserialization

Exploit Title: HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability Date: 01-28-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...