CVE-2017-7357: Unrestricted Upload of File with Dangerous Type

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file...

PT-2017-17680

Name of the Vulnerable Software and Affected Versions Hipchat Server versions prior to 2.2.3 Description The issue allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. Recommendations For versions prior to 2.2.3, update to...

Dell OpenManage Server Administrator 8.2 ViewFile Directory Traversal

The version of Dell OpenManage Server Administrator OMSA running on the remote web server is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input to the 'file' parameter in the /ViewFile script. An authenticated, remote attacker who can access an...

Dell OpenManage Server Administrator 8.3 - XML External Entity

!/usr/bin/ruby Exploit Title: Dell OpenManage Server Administrator 8.3 XXE Date: June 9, 2016 Exploit Author: hantwister Vendor Homepage: http://en.community.dell.com/techcenter/systems-management/w/wiki/1760.openmanage-server-administrator-omsa Software Link:...

Dell OpenManage Server Administrator Directory Traversal Vulnerability (Apr 2016)

Dell OpenManage Server Administrator is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dell EMC OpenManage Server Administrator (OMSA) Detection (HTTP)

HTTP based detection of Dell EMC OpenManage Server Administrator OMSA. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell OpenManage Server Administrator Directory Traversal Vulnerability

Dell OpenManage Server Administrator OMSA is a set of system management solutions from Dell Dell. A directory traversal vulnerability exists in Dell OMSA version 8.2, which can be exploited by a remote attacker to read arbitrary files with the help of ... \ string to read arbitrary files...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

CVE-2016-4004

Dell OpenManage Server Administrator (OMSA) is affected by CVE-2016-4004 (directory traversal via the file parameter to /ViewFile). Multiple sources confirm that authenticated admins could read arbitrary files; versions 8.2 (and affected 7.x/8.x) are implicated, with a patch referenced for 8.5. I...

PT-2016-5803

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator OMSA version 8.2 Description A directory traversal issue allows remote authenticated administrators to read arbitrary files by using a .. dot dot backslash in the file parameter to the ViewFile endpoint...

CVE-2016-4004: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal

Dell OpenManage Server Administrator 8.2 - Authenticated Directory Traversal Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal

Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

Dell OpenManage Server Administrator 8.2 Authentication Directory Traversal

Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

CVE-2013-0740

Open redirect vulnerability in Dell OpenManage Server Administrator OMSA before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer...

Open redirect

Open redirect vulnerability in Dell OpenManage Server Administrator OMSA before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer...

CVE-2013-0740

Open redirect vulnerability in Dell OpenManage Server Administrator OMSA before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer...

CVE-2013-0740: Improper Input Validation

Open redirect vulnerability in Dell OpenManage Server Administrator OMSA before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer...

PT-2014-2462

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator OMSA versions prior to 7.3.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer. Recommendation...