HP Data Protector 6.10 / 6.11 / 6.20 Install Service

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Data Protector 6.10/6.11/6.20 Install Service', 'Description' = %q This module exploits HP Data Protector Omniinet process o...

HP System Management Homepage (SMH) AddXECert Remote DoS

The HP System Management Homepage SMH application running on the remote web server is affected by a denial of service vulnerability due to improper handling of the Common Name in a certificate uploaded via /proxy/AddXECert. An unauthenticated, remote attacker can exploit this, via a crafted...

HP Support Assistant Detection (Windows SMB Login)

Detects the installed version of HP Support Assistant Version Detection Windows. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP Support Assistant Authentication Bypass Vulnerability - Windows

HP Support Assistant is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP Data Protector Encrypted Communication Remote Command Execution

This module exploits a well known remote code execution exploit after establishing encrypted control communications with a Data Protector agent. This allows exploitation of Data Protector agents that have been configured to only use encrypted control communications. This exploit works by executin...

HP Support Assistant < 8.1.52.1 Unspecified Local Authentication Bypass

The version of HP Support Assistant installed on the remote Windows host is prior to 8.1.52.1. It is, therefore, affected by an unspecified flaw that allows an attacker to bypass local authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid90545;...

HP Support Assistant Installed

Binary data hpsupportassistantinstalled.nbin...

HP ePrint Enterprise (service) - Customized SSL, Insecure SSL socket vulnerabilities

HackApp vulnerability scanner discovered that application HP ePrint Enterprise service published at the 'play' market has multiple vulnerabilities...

HP All-in-One Printer Remote - Insecure SSL socket, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application HP All-in-One Printer Remote published at the 'play' market has multiple vulnerabilities...

HP Print Service Plugin - Insecure SSL socket, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application HP Print Service Plugin published at the 'play' market has multiple vulnerabilities...

HP ePrint - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application HP ePrint published at the 'play' market has multiple vulnerabilities...

HP Printables - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application HP Printables published at the 'play' market has multiple vulnerabilities...

HP iLO Mobile - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application HP iLO Mobile published at the 'play' market has multiple vulnerabilities...

HP SMARTS - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application HP SMARTS published at the 'play' market has multiple vulnerabilities...

HP ArcSight ESM < 5.6 / 6.0 / 6.5c SP1 P2 / 6.8c Multiple Vulnerabilities

According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 5.6, 6.0, 6.5.1.1845.0 6.5c SP1 P2, or 6.8.0.1896 6.8c. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that...

HP ArcSight ESM < 6.8c Information Disclosure

According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 6.8.0.1896 6.8c. It is, therefore, affected by an unspecified flaw that allows an authenticated, remote attacker to disclose sensitive information. C...

HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.6. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - HP...

HP Network Automation 9.22.0x / 10.00.0x < 10.00.02 Multiple RCE

The HP Network Automation application running on the remote host is version 9.22.0x or version 10.00.0x prior to 10.00.02. It is, therefore, affected by multiple remote code execution vulnerabilities due to multiple unspecified flaws. A remote attacker can exploit these issues to execute arbitrar...

VulnCheck KEV: CVE-2013-4810

HP ProCurve Manager PCM, PCM+, Identity Driven Manager IDM, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to 1 EJBInvokerServlet or 2 JMXInvokerServlet...

HP Operations Orchestration 10.x < 10.51 Java Object Deserialization RCE

The version of HP Operations Orchestration installed on the remote host is 10.x prior to 10.51. It is, therefore, affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated,...