HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code

Potential Security Impact: Local: Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System ROM firmware prior to v1.26 HPE Apollo 4510 System ROM firmware prior to v1.26 HPE Apollo 6000 DLC System ROM firmware prior ...

synergy-cables.co.il XSS vulnerability

Open Bug Bounty ID: OBB-336563 Description| Value ---|--- Affected Website:| synergy-cables.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Eternal Synergy Exploit Analysis

Introduction Recently we announced a series of blog posts dissecting the exploits released by the ShadowBrokers in April 2017; specifically some of the less explored exploits. This week we are going to take a look at Eternal Synergy, an SMBv1 authenticated exploit. This one is particularly...

Eternal Synergy Exploit Analysis

Introduction Introduction Recently we announced a series of blog posts dissecting the exploits released by the ShadowBrokers in April 2017; specifically some of the less explored exploits. This week we are going to take a look at Eternal Synergy, an SMBv1 authenticated exploit. This one is...

live.citrixsynergy.com XSS vulnerability

Vulnerable URL: http://live.citrixsynergy.com/2015/player/ondemandplayer.php?presentationid=1"...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Collaboration has an XSS vulnerability that can be exploited by attackers to gain administrator privileges, steal data, and so on...

shadowbroker

This repository, kaleozhou/shadowbroker, is an offensive tool repository containing exploits for various vulnerabilities in different software and systems. The exploits are categorized into several types, including SMB Server Message Block exploits, email server exploits, and others. The reposito...

Weak Password Vulnerability in Some Users of Zhiyuan Synergy A8 System

Zhiyuan A8 system is an OA office management software. A weak password vulnerability exists in some users of Zhiyuan Synergy A8 system. An attacker is allowed to utilize the weak password 123456 to log in to the system background and obtain administrator privileges...

updates.synergy-usa-llc.com XSS vulnerability

Vulnerable URL: http://updates.synergy-usa-llc.com/ShowRansomSum.asp?jsoncallback=prompt/OPENBUGBOUNTY/...

HPE Synergy Planning Tool Detection (Windows SMB Login)

Detects the installed version of HPE Synergy Planning Tool. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HPE Synergy Planning Tool Remote Arbitrary Code Execution Vulnerability

HPE Synergy Planning Tool is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SQL Injection Vulnerability in Channelcode Parameter of Hopping Synergy Content Management System

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the channelcode parameter of the HZCMS. An attacker can exploit the vulnerability to obtain database information...

CVE-2016-4377: Undefined Security Weakness

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite CISSS before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered...

Remote Code Execution Vulnerability in Multiple HPE Products

HPE Synergy Planning Tool and others are products of Hewlett Packard Enterprise HPE, U.S. HPE Synergy is a suite of platforms that leverage fluid resource pooling, software-defined intelligence, and unified APIs to provide organizations with a platform for continuous optimization of legacy and...

synergyventures.lk XSS vulnerability

Vulnerable URL: http://synergyventures.lk/productbrand.php?brandname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Synergy 2.0 Local File Inclusion

Synergy CMS lfi vulnerability Product: Synergy CMS Vulnerability: Post-authentication local file inclusion Impact: Medium/Limited Authors: Jan Hodermarsky and Lukas Andruska Vendor Homepage: http://www.s-e.lt Affected versions: = 2.0 Tested on: Mozilla Firefox 36 Google Dork: intext:"Svetainių...

Synergy Software - id SQL Injection

Synergy Software - id SQL Injection source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

Synergy Software - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

Synergy Software SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Synergy Software courses.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.synergysoftwares.biz/ Persian Gulf 4 Ever! Dork : "Website Designed By : Synergy Software...

Synergy Detection (Linux/Unix SSH Login)

SSH login-based detection of Synergy. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801874";...