12 matches found
CVE-2016-2173
CVE-2016-2173 - Ejecución Remota de Código en Spring AMQP - Prueba de Aplicación Descripción La clase org.springframework.core.serializer.DefaultDeserializer no valida el objeto deserializado contra una lista blanca. Al suministrar un objeto serializado manipulado, como el gadget de Commons...
HPE Systems Insight Manager AMF Deserialization Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE Systems Insight Manager AMF Deserialization RCE', 'Description' = %q A remotely exploitable vulnerability exists within HPE System Insight...
HPE Systems Insight Manager AMF Deserialization Remote Code Execution Exploit
A remotely exploitable vulnerability exists within HPE System Insight Manager SIM version 7.6.x that can be leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight Manager's hpsimsvc.exe process, which runs with administrative privileges. The...
HPE Systems Insight Manager AMF Deserialization RCE
A remotely exploitable vulnerability exists within HPE System Insight Manager SIM version 7.6.x that can be leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight Manager's hpsimsvc.exe process, which runs with administrative privileges. The...
Remote code execution
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
CVE-2016-4405
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
CVE-2016-4405
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
CVE-2016-4405
HP Business Service Management (BSM) is affected by a remote code execution vulnerability in the Apache Commons Collections Java deserialization implementation, specifically versions 9.20–9.26. The issue arises from deserializing untrusted data, enabling an attacker to execute arbitrary code in t...
CVE-2016-4405: Deserialization of Untrusted Data
A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...
Security Bulletin: Apache Commons Collection Java Deserialization Vulnerability in Multiple N series Products
Summary Multiple N series products incorporate the Apache Commons Collection library. Versions of Apache Commons Collection before 3.2.2 and including 4.0 are susceptible to a vulnerability that could be exploited to allow remote attackers to execute arbitrary commands on the system. Multiple N...
[SECURITY] [DLA 352-1] libcommons-collections3-java security update
Package : libcommons-collections3-java Version : 3.2.1-4+deb6u1 The Apache commons collection suffered from security issues, making applications to accept serialized objects from untrusted sources. Remote attackers might take advantage of these issues to execute arbitrary Java functions and even...
