Cross site scripting

Cross-site scripting XSS vulnerability on HP Officejet Pro 8500 aka A909 All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4845

Cross-site scripting XSS vulnerability on HP Officejet Pro 8500 aka A909 All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4845

The CVE-2013-4845 issue affects HP Officejet Pro 8500 (A909) All-in-One Printer web interface, where a cross-site scripting (XSS) vulnerability could allow an attacker to inject arbitrary script via unspecified vectors. Affected firmware/web context is the printer’s web UI; exposed impact is user...

CVE-2013-6810

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition CMCNE, HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file...

CVE-2013-6810

CVE-2013-6810 is an exploitable remote code execution vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) via the Inmservlets.war FileUploadController. The issue arises from unauthenticated file upload where a crafted filename can lead to arbitrary file uploads and remote co...

HP Multiple Network Products Remote Information Disclosure and DoS (HPSBHF02912)

The remote HP router or switch could be missing a vendor-supplied update that corrects an issue that a malicious attacker could remotely exploit in order to cause a disclosure of information or denial of service DoS. C Tenable Network Security, Inc. include"compat.inc"; if description...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This Metasploit module exploits a directory traversal vulnerability on the version 11.52 of HP LoadRunner. The vulnerability exists on the EmulationAdmin web service, specifically in the copyFileToServer method, allowing to upload arbitrary files. This Metasploit module has been tested successful...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/1.1/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper...

HP LoadRunner EmulationAdmin - Web Service Directory Traversal (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/1.1/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper...

HPSBPI02938 rev.2 - Certain HP LaserJet Printers, Remote Denial of Service (DoS)

Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Printers. The vulnerability could be exploited remotely resulting in a Denial of Service DoS. RESOLUTION HP has provided firmware updates fo...

HP Intelligent Management Center Web Administration Interface Detection

Binary data hpimcwebinterfacedetect.nbin...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

CVE-2013-6427

The CVE-2013-6427 vulnerability affects HP Linux Imaging and Printing (HPLIP) with the hp-upgrade service in 3.x up to 3.13.11, where upgrade.py launches a program from an http URL, enabling a man-in-the-middle attacker to execute arbitrary code by controlling the client–server data stream. Open-...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

USN-2050-1: Linux kernel (OMAP4) vulnerabilities

An information leak was discovered in the handling of ICMPv6 Router Advertisement RA messages in the Linux kernel's IPv6 network stack. A remote attacker could exploit this flaw to cause a denial of service excessive retries and address-generation outage, and consequently obtain sensitive...

CVE-2013-6000

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

Directory traversal

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

CVE-2013-6000

CVE-2013-6000 affects Tattyan HP TOWN (modified version) 5_10 and earlier with a directory traversal vulnerability that allows remote attackers to read arbitrary files by using ".." in a request. The vulnerability is confirmed in multiple external records (JVNDB-2013-000112, JVN41703192, NVD entr...