DSquare Exploit Pack: D2SEC_LRWEB

Name| d2seclrweb ---|--- CVE| CVE-2013-4798 Exploit Pack| D2ExploitPack Description| HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution Vulnerability Notes|...

Design/Logic Flaw

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690...

Design/Logic Flaw

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734...

Design/Logic Flaw

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670...

Code injection

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705...

Code injection

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735...

Code injection

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736...

DSquare Exploit Pack: D2SEC_LRWEB2

Name| d2seclrweb2 ---|--- CVE| CVE-2013-2370 Exploit Pack| D2ExploitPack Description| HP LoadRunner lrFileIOService ActiveX WriteFileBinary Remote Code Execution Vulnerability Notes|...

DSquare Exploit Pack: D2SEC_MICWA

Name| d2secmicwa ---|--- CVE| CVE-2013-2368 Exploit Pack| D2ExploitPack Description| HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Buffer Overflow Vulnerability Notes|...

CVE-2013-4800 HP LoadRunner magentproc.exe Overflow

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. Recent assessments: wchen-r7 at September 12, 2019 6:08pm UTC reported: - Looks like this has changed. Assessed Attacker Value: 0 Assessed Attacker Valu...

HP LoadRunner multiple security vulnerabilities

DoS, code execution...

[security bulletin] HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03862772 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03862772 Version: 1 HPSBGN02905 rev....

HP LoadRunner magentproc.exe Overflow

This module exploits a stack buffer overflow in HP LoadRunner before 11.52. The vulnerability exists on the LoadRunner Agent Process magentproc.exe. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2013-2369

HP LoadRunner before 11.52 is affected by CVE-2013-2369. The vulnerability is tied to the lrFileIOService ActiveX control CreateFileCont, which allows remote code execution and requires user interaction (visiting a malicious page or opening a malicious file). Affected product/versions: HP LoadRun...

CVE-2013-4798

HP LoadRunner prior to 11.52 is vulnerable via the lrFileIOService ActiveX WriteFileString method, which does not sanitize input and allows a remote attacker to write files (directory traversal) potentially enabling code execution. The issue affects Windows platforms and has been addressed by upg...

CVE-2013-2370

CVE-2013-2370 concerns HP LoadRunner prior to 11.52. Public records in connected sources indicate an unspecified vulnerability that allows remote code execution via unknown vectors (aka ZDI-CAN-1671). Several connected entries reference the vulnerability in the context of the lrFileIOService Acti...

CVE-2013-4799

HP LoadRunner CVE-2013-4799 is a remote code execution flaw in HP LoadRunner before v11.52. The root cause is an insufficient check on the length value of XDR-encoded data in an incoming request, leading to a heap buffer overflow. An unauthenticated remote attacker could exploit this to run arbit...

CVE-2013-2369

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670...

CVE-2013-2368

HP LoadRunner before 11.52 is affected by CVE-2013-2368 through the micWebAjax.dll ActiveX NotifyEvent method. The vulnerability causes stack corruption via user-supplied input, enabling remote code execution when a user visits a crafted page or opens a malicious file. Exploitation requires user ...

CVE-2013-4801

CVE-2013-4801 is linked to HP LoadRunner before 11.52 and is tied to the lrLRIServices ActiveX control. The connected documents show a remote code-execution flaw in the ActiveX control’s handling of input to the output directory mutator, exploitable by persuading a user to open a crafted page or ...