HPE Insight Remote Support security vulnerabilities

HPE Insight Remote Support is a software for improving server availability from HPE America. A security vulnerability exists in versions prior to HPE Insight Remote Support v7.15.0.646 that stems from vulnerability to path traversal attacks...

processAttachmentDataStream function in the Code Execution

The vulnerability of the processAttachmentDataStream function in the software for remote monitoring, management, and support of servers and data storage systems in HPE Insight Remote Support is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this...

vantage6 security vulnerabilities

vantage6 is a vantage6 open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability exists in vantage6 versions prior to 4.11 that stems from the change password feature allowing unlimited attempts, which could lead to a brute force atta...

MAL-2025-4856 Malicious code in nextjs-insight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db00088e31ce8475190f64475d3a917f95185bbf176e0ac091fe160399ce6f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextjs-insight

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nextjs-insight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db00088e31ce8475190f64475d3a917f95185bbf176e0ac091fe160399ce6f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hewlett Packard Enterprise Insight Remote Support processAttachmentDataStream Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the processAttachmentDataStream...

PT-2025-23949 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support versions prior to 7.15.0.646 Description: A vulnerability in HPE Insight Remote Support may allow an unauthenticated denial of service. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646...

PT-2025-23950 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support IRS versions prior to 7.15.0.646 Description: A path traversal issue exists. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646 or later to resolve the issue...

HPESBGN04878 rev.1 - HPE Insight Remote Support (IRS), Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Directory Traversal, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Insight Remote Support - prior to 7.15.0.646 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-37097 |...

Ubuntu: Security Advisory (USN-7525-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-cd51e0177b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-d23a07ad00)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:01662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-47854

An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated user without sanitization if executed by that user...

CVE-2024-8042

Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added to the incorrect...

CVE-2024-33583

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

CVE-2024-37994

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT 6GT2811-6BC10-2AA0 All versions V4.2, SIMATIC Reader RF610R ETSI 6GT2811-6BC10-0AA0 All versions V4.2, SIMATIC Reader RF610R FCC 6GT2811-6BC10-1AA0 All versions V4.2, SIMATIC Reader RF615R CMIIT 6GT2811-6CC10-2AA0 All versions V4....

CVE-2024-46542

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks...

CVE-2023-28347

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console...