HP Switch - Authentication Bypass

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...

HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access

HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. id: CVE-2020-7136 info: name: HPE Smart Update Manager 8.5.6 - Remote Unauthorized Access author: gy741 severity: critical description: HPE Smart Update Manager SUM prior to version 8.5.6 could allow remot...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. id: CVE-2010-1586 info: name: HP System Management Homepage SMH v2.x.x.x - Open...

Aruba Airwave <8.2.3.1 - Cross-Site Scripting

Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. id: CVE-2016-8527 info: name: Aruba Airwave 8.2.3.1 - Cross-Site Scripting author: pikpikcu severity: medium description: Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting...

CVE-2021-3441-check

HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |� |||==HP===||||/...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

HP-HPLIP-Mass-CVE-checker-2026-09-

massexploit — HP HPLIP mass CVE checker 2026-09 Mass check and research exploit driver for HP HPLIP 3.26.6 — CVE-2026-91097 through CVE-2026-91106. CVE| CVSS 4| CWE| Remote ---|---|---|--- CVE-2026-91097| 7.0| CWE-787| yes UI CVE-2026-91098| 8.6| CWE-122| yes UI CVE-2026-91099| 5.1| CWE-61| local...

CVE-2002-0991

CVE-2002-0991 Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier Exploit-db publication at https://www.exploit-db.com/exploits/21577/ Packetstorm publication at https://packetstormsecurity.com/files/26303/cifslogin.txt.html SecurityFocus publication at...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

libunwind_CVE-2015-3239_After

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

h3c-pt-tools

h3c-pt-tools Huawei/H3C/HP Penetration Testing Tools A small collection of scripts to assist penetration testing/auditing networks which have Huawei and/or HP/H3C devices...

CVE-2022-37932

HP Switch Firmware Authentication Bypass Vulnerability CVE-2022-37932 Firmware Version: PD.02.21 Affected Devices: HP 1920 Series Smart Managed Switches Overview This repository documents a critical authentication bypass vulnerability in HP 1920 Series Smart Managed Switches running firmware...

CVE-2021-3438

CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...

subcrawl

SubCrawl SubCrawl es un framework desarrollado por Patrick Schläpfer, Josh Stroschein y Alex Holland del equipo de Threat Research de HP Inc. SubCrawl está diseñado para encontrar, escanear y analizar directorios abiertos. El framework es modular, compuesto por cuatro componentes: módulos de...

LinuxKI Toolset <= 6.01 - Remote Command Execution

LinuxKI v6.0-1 and earlier are vulnerable to remote code execution. id: CVE-2020-7209 info: name: LinuxKI Toolset = 6.01 - Remote Command Execution author: dwisiswant0 severity: critical description: LinuxKI v6.0-1 and earlier are vulnerable to remote code execution. impact: | Successful...

CVE-2024-27460

CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...

perf-exploiter

perf-exploiter CVE-2014-2630 Em um de nossos testes de penetração recentes, abusamos de uma vulnerabilidade que afeta um binário suid chamado "xglance-bin". Parte da solução de monitoramento de desempenho da HP , ela nos permitiu escalar nossas sessões locais sem privilégios em alguns sistemas...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...