Hewlett-Packard SiteScope EmailServlet servlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EmailServlet servlet. The issue lies in the ability to download arbitrar...

HP SiteScope Unspecified Authentication Bypass

The version of HP SiteScope installed on the remote host is affected by an authentication bypass vulnerability having unspecified impact. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76427; scriptversion"1.6";...

CVE-2014-2614

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140...

Authentication flaw

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140...

CVE-2014-2614

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140...

CVE-2014-2614

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140...

CVE-2014-2614

CVE-2014-2614 affects HP SiteScope versions 11.1x–11.13 and 11.2x–11.24, enabling remote authentication bypass (ZDI-2140). HP’s advisory HPSBMU03059 rev.1 lists affected versions and provides patch paths (SiS 11.13 and 11.24) for Windows, Linux, Solaris. Other connected sources reference the same...

HP SiteScope issueSiebelCmd - Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking HttpFingerprint = :pattern =...

HP SiteScope Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Hewlett-Packard SiteScope SOAP Arbitrary File Download and Denial of Service Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. The issue lies in failure to require...

HP SiteScope issueSiebelCmd SOAP Request Code Execution - Ver2 (CVE-2013-4835)

A command execution vulnerability has been found in HP SiteScope. The vulnerability is due to lack of authentication when handling "issueSiebelCmd" SOAP requests. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affected service...

HP SiteScope security vulnerabilities

Code execution, information leakage, DoS on SOAP requests...

[security bulletin] HPSBMU02933 rev.2 - HP SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code Execution, Arbitrary File download, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03969435 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03969435 Version: 2 HPSBMU02933 rev....

CVE-2013-6207

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084...

Design/Logic Flaw

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084...

CVE-2013-6207

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084...

CVE-2013-6207

HP SiteScope SOAP loadFileContents vulnerability (CVE-2013-6207) affects SiteScope 10.1x, 11.1x, 11.21. The flaw in handling SOAP requests allows remote, unauthenticated attackers to trigger remote code execution, arbitrary file download, or DoS. ZDI notes exploitation via SOAP endpoints without ...

HP SiteScope 'loadFileContents' SOAP请求远程代码执行漏洞

BUGTRAQ ID: 65972 CVECAN ID: CVE-2013-6207 HP SiteScope是无代理监控软件，可维护其分布式IT 基础架构的可用性和性能。 SiteScope 10.1x, 11.1x, 11.21版本的loadFileContents SOAP功能存在安全漏洞，成功利用后可导致任意代码执行、任意文件下载和拒绝服务。 0 HP SiteScope 11.21 HP SiteScope 11.1x HP SiteScope 10.1x 厂商补丁： HP -- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

HP SiteScope runOMAgentCommand 11.20 RCE

Remote code execution vulnerability in HP SiteScope runOMAgentCommand Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HP SiteScope issueSiebelCmd 11.20 RCE

Remote code execution vulnerability in HP SiteScope issueSiebelCmd Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...