HP Mercury LoadRunner Agent magentproc.exe - Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution", 'Description' = %q This module exploits a remote command execution...

HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution Exploit

This Metasploit module exploits a remote command execution vulnerability in HP LoadRunner before 9.50 and also HP Performance Center before 9.50. HP LoadRunner 12.53 and other versions are also most likely vulnerable if the non-default SSL option is turned off. By sending a specially crafted...

HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution

This module exploits a remote command execution vulnerablity in HP LoadRunner before 9.50 and also HP Performance Center before 9.50. HP LoadRunner 12.53 and other versions are also most likely vulneable if the non-default SSL option is turned off. By sending a specially crafted packet, an attack...

HP Performance Center < 12.53 Patch 4 libxdrutil.dll mxdr_string() RCE

The version of HP Performance Center installed on the remote Windows host is prior to 12.53 Patch 4. It is, therefore, affected by a remote code execution vulnerability due to a heap-based buffer overflow condition in the mxdrstring function in libxdrutil.dll. An unauthenticated, remote attacker...

HP Performance Center MMS Protocol Buffer Overflow RCE

The version of HP Performance Center installed on the remote Windows host is affected by an unspecified buffer overflow condition in the MMS protocol due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or t...

HP Performance Center Detect

Binary data hpperformancecenterinstalled.nbin...

HP Performance Center 11.52.x / 12.x < 12.53 Multiple Vulnerabilities

The version of HP Performance Center installed on the remote Windows host is 11.52.x or 12.x prior to 12.53. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied string prior to copying it to ...

Microsoft Visual Studio Report Viewer Control Multiple Cross Site Scripting Vulnerabilities

Description Microsoft Visual Studio is prone to multiple cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

HP Performance Center Agent / HP Load Runner Agent code execution

Code execution via TCP/54345 service...

CVE-2010-1549

Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-1549

Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2007-0446

The CVE-2007-0446 vulnerability affects Hewlett-Packard Mercury LoadRunner/Performance Center/Monitor over Firewall components. It is a stack-based overflow in magentproc.exe triggered by an overly long server_ip_name field in packets sent to TCP port 54345, which overflows mchan.dll. Affected pr...