14 matches found
CVE-2016-2173
CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Test Description The class org.springframework.core.serializer.DefaultDeserializer does not validate the deserialized object against a whitelist. By supplying a crafted serialized object like Chris Frohoff's Commons Collection gadget,...
HPE Systems Insight Manager AMF Deserialization Remote Code Execution Exploit
A remotely exploitable vulnerability exists within HPE System Insight Manager SIM version 7.6.x that can be leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight Manager's hpsimsvc.exe process, which runs with administrative privileges. The...
HPE Systems Insight Manager AMF Deserialization Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE Systems Insight Manager AMF Deserialization RCE', 'Description' = %q A remotely exploitable vulnerability exists within HPE System Insight...
HPE Systems Insight Manager AMF Deserialization RCE
A remotely exploitable vulnerability exists within HPE System Insight Manager SIM version 7.6.x that can be leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight Manager's hpsimsvc.exe process, which runs with administrative privileges. The...
CVE-2016-4405
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
Remote code execution
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
CVE-2016-4405
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
CVE-2016-4405
HP Business Service Management (BSM) is affected by a remote code execution vulnerability in the Apache Commons Collections Java deserialization implementation, specifically versions 9.20–9.26. The issue arises from deserializing untrusted data, enabling an attacker to execute arbitrary code in t...
CVE-2016-4405: Deserialization of Untrusted Data
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
PT-2018-4921
Name of the Vulnerable Software and Affected Versions HP Business Service Management BSM versions v9.20 through v9.26 Description A remote code execution issue was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization. Recommendations For HP Busines...
Security Bulletin: Apache Commons Collection Java Deserialization Vulnerability in Multiple N series Products
Summary Multiple N series products incorporate the Apache Commons Collection library. Versions of Apache Commons Collection before 3.2.2 and including 4.0 are susceptible to a vulnerability that could be exploited to allow remote attackers to execute arbitrary commands on the system. Multiple N...
Exploit for Improper Input Validation in Fedoraproject Fedora
CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Tes...
[SECURITY] [DLA 352-1] libcommons-collections3-java security update
Package : libcommons-collections3-java Version : 3.2.1-4+deb6u1 The Apache commons collection suffered from security issues, making applications to accept serialized objects from untrusted sources. Remote attackers might take advantage of these issues to execute arbitrary Java functions and even...
