15694 matches found
HP Operations Manager / Operations Agent < 11.13 XSS (HPSBMU03126)
According to its self-reported version, the version of the HP Operations Agent service running on the remote host is affected by a cross-site scripting vulnerability. Operations Agent is often an included component of Operations Manager. C Tenable Network Security, Inc. include"compat.inc"; if...
HP Data Protector EXEC_INTEGUTIL Remote Code Execution Exploit
This exploit abuses a vulnerability in the HP Data Protector. The vulnerability exists in the Backup client service, which listens by default on TCP/5555. The EXECINTEGUTIL request allows to execute arbitrary commands from a restricted directory. Since it includes a perl executable, it's possible...
HP Data Protector - 'EXEC_INTEGUTIL' Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector EXECINTEGUTIL Remote Code Execution', 'Description' = %q This exploit abuses a vulnerability in the HP Data...
HP Data Protector EXEC_INTEGUTIL Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector EXECINTEGUTIL Remote Code Execution', 'Description' = %q This exploit abuses a vulnerability in the HP Data...
CVE-2014-7874
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2647
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2647
CVE-2014-2647 is a remote cross-site scripting (XSS) vulnerability in HP OpenView/OpenView HP Operations Broker/HP Operations Agent (HP Operations Manager) for versions prior to 11.14. The weakness allows an attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface...
CVE-2014-7874
CVE-2014-7874 is a CSRF vulnerability affecting HP System Management Homepage (SMH) on HP-UX. It impacts SMH before 3.2.3 on HP-UX B.11.23 and before 3.2.8 on HP-UX B.11.31, potentially allowing remote attackers to hijack user authentication via unknown vectors. HP attributes the issue to CSRF an...
CVE-2014-7874
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2647
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
HP Operations Agent crossite scripting
No description provided...
[security bulletin] HPSBMU03126 rev.1 - HP Operations Manager (formerly OpenView Communications Broker), Remote Cross-site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04472444 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04472444 Version: 1 HPSBMU03126 rev....
HP SiteScope authentication bypass
No description provided...
HP Sprinter Installed
Binary data hpsprinterinstalled.nbin...
[security bulletin] HPSBMU03061 rev.1 - HP Release Control, Disclosure of Privileged Information and Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04352674 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04352674 Version: 1 HPSBMU03061 rev....
[security bulletin] HPSBMU03064 rev.1 - HP Universal CMDB, Remote Information Disclosure, Execution of Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04357076 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04357076 Version: 1 HPSBMU03064 rev....
[security bulletin] HPSBMU03059 rev.1 - HP SiteScope, Remote Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04355129 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04355129 Version: 1 HPSBMU03059 rev....
HP Operations Manager 9.10 / 9.11 / 9.20 Multiple RCE
The version of HP Operations Manager for Unix installed on the remote host is 9.10, 9.11, or 9.20 without the vendor-supplied patches. It is, therefore, affected by multiple unspecified flaws that allow an unauthenticated, remote attacker to execute arbitrary code. C Tenable Network Security, Inc...