CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

Design/Logic Flaw

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378

The CVE affects HP XP P9000 Command View Advanced Edition Software (before 8.4.1-00) and XP7 Command View Advanced Edition Suite (before 8.4.1-00). Vulnerable components include Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD)...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

PT-2016-5924

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00 Description The issue allows remote attackers to obtain sensitive information via unspecified...

CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

Win32k Forms Creation Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. There is a denial-of-service vulnerability in Win32k form creation, which occurs when a parameter in a system service function in Win32k.sys fails to be correctly checked, causing the local kernel to deny service when the user runs...

win32k.sys SfnOUTSTRING Local Kernel Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. A local kernel denial of service vulnerability exists in the win32k.sys SfnOUTSTRING function. An attacker can exploit the vulnerability to launch a denial of service attack, resulting in a blue screen and reboot of the system. In...

Philips Xper-IM Connect Vulnerabilities

OVERVIEW Independent researchers Mike Ahmadi of Synopsys and Billy Rios of Whitescope LLC, in collaboration with Philips, have identified numerous vulnerabilities with an automated software composition analysis tool in the Philips Xper-IM Connect system running on Windows XP. Philips reports that...

Core FTP Le 2.2 Buffer Overflow

!/usr/bin/env python ''' Exploit Title: Core FTP Le v2.2 - Proxy Password Buffer Overflow Date: 2016-7-11 Author: s0nk3y Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows XP CVE: N/A Type: Buffer Overflow + Proof of concept Click options Global Settings - Proxy ...

Enonic XP: source code security analysis report

Several vulnerabilities were discovered in Enonic AS 'Enonic XP' software: Утечка пользовательских данных между сессиями Использование XSL трансформации для исполнения произвольного кода Отсутствие верификации цифровой подписи исполняемых файлов, полученных из недоверенных источников HttpOnly...

Mediacoder 0.8.43.5830 - '.m3u' Buffer Overflow SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

Mediacoder 0.8.43.5830 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.8.43.5830 - .m3u Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

OPAC KpwinSQL - SQL Injection

OPAC KpwinSQL - SQL Injection @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html Product Version - / All...

Mediacoder 0.8.43.5830 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

Windows XP - 10 - Download & Execute Shellcode

Windows XP - 10 - Download & Execute Shellcode. Shellcode exploit for windows platform / + Author : B3mB4m Contact : [email protected] Project : https://github.com/b3mb4m/shellsploit-framework Greetz : Bomberman,T-Rex,Pixi ----------------------------------------------------------- Tested on ...

Adobe Flash Player DLL Hijacking

Hi @ll, the executable uninstallers for Flash Player before version 22.0.0.192 and 18.0.0.360 both released on 2016-06-15 are vulnerable to DLL hijacking: they load and execute multiple Windows system DLLs from their "application directory" instead of Windows' "system directory"...

BadTunnel: the impact of Win95 to Win10“Super-vulnerability”with CVE-2 0 1 6-3 2 1 3-the vulnerability warning-the black bar safety net

! Yesterday, Microsoft released a high-risk vulnerability patch the vulnerability by Tencent basaltic laboratory Creator to Yang Chinese circle of safety person of the TK, the leader of the Find, and named it“BadTunnel”, is currently the Windows history of the most wide-reaching vulnerabilities,...

Security updates for all active release lines, June 2016

Security updates for all active release lines, June 2016 Update 23-June-2016 Releases available After a thorough assessment of the fixes we were planning on including, we have decided to scale back this security update to only include a subset. We are deferring some fixes while we improve the...

Poison Ivy 2.1.x (C2 Server) - Remote Buffer Overflow (Metasploit)

Poison Ivy 2.1.x C2 Server - Remote Buffer Overflow Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Poison Ivy 2.1.x C2 Buffer Overflow', 'Description' = %q This...