15783 matches found
[security bulletin] HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03862772 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03862772 Version: 1 HPSBGN02905 rev....
HP LoadRunner multiple security vulnerabilities
DoS, code execution...
[security bulletin] HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Access, Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03824583 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03824583 Version: 1 HPSBMU02894 rev....
HP LightsOut Server Detection
Binary data 6954.prm...
[security bulletin] HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03864640 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03864640 Version: 1 HPSBGN02906 rev....
HP Network Node Manager multiple security vulnerabilities
Unauthorized access, code execution, DoS...
HP SiteScope Remote Code Execution
This module exploits a code execution flaw in HP SiteScope. The vulnerability exists in the opcactivate.vbs script, which is reachable from the APIBSMIntegrationImpl AXIS service, and uses WScript.Shell.run to execute cmd.exe with user provided data. Note that the opcactivate.vbs component is...
HP LoadRunner magentproc.exe Overflow
This module exploits a stack buffer overflow in HP LoadRunner before 11.52. The vulnerability exists on the LoadRunner Agent Process magentproc.exe. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use...
CVE-2013-2369
HP LoadRunner before 11.52 is affected by CVE-2013-2369. The vulnerability is tied to the lrFileIOService ActiveX control CreateFileCont, which allows remote code execution and requires user interaction (visiting a malicious page or opening a malicious file). Affected product/versions: HP LoadRun...
CVE-2013-4798
HP LoadRunner prior to 11.52 is vulnerable via the lrFileIOService ActiveX WriteFileString method, which does not sanitize input and allows a remote attacker to write files (directory traversal) potentially enabling code execution. The issue affects Windows platforms and has been addressed by upg...
CVE-2013-2369
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670...
CVE-2013-4799
HP LoadRunner CVE-2013-4799 is a remote code execution flaw in HP LoadRunner before v11.52. The root cause is an insufficient check on the length value of XDR-encoded data in an incoming request, leading to a heap buffer overflow. An unauthenticated remote attacker could exploit this to run arbit...
CVE-2013-2370
CVE-2013-2370 concerns HP LoadRunner prior to 11.52. Public records in connected sources indicate an unspecified vulnerability that allows remote code execution via unknown vectors (aka ZDI-CAN-1671). Several connected entries reference the vulnerability in the context of the lrFileIOService Acti...
CVE-2013-4798
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705...
CVE-2013-4799
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734...
CVE-2013-4800
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735...
CVE-2013-4797
HP LoadRunner vulnerability CVE-2013-4797 involves the LrWebIEBrowserMgr.dll ActiveX control. The ZDI advisory (ZDI-13-206) details a remote code execution flaw in the FlushSnapshotToFile method of this control, where improperDestinationPath sanitization enables directory traversal and arbitrary ...
CVE-2013-4801
CVE-2013-4801 is linked to HP LoadRunner before 11.52 and is tied to the lrLRIServices ActiveX control. The connected documents show a remote code-execution flaw in the ActiveX control’s handling of input to the output directory mutator, exploitable by persuading a user to open a crafted page or ...
CVE-2013-2368
HP LoadRunner before 11.52 is affected by CVE-2013-2368 through the micWebAjax.dll ActiveX NotifyEvent method. The vulnerability causes stack corruption via user-supplied input, enabling remote code execution when a user visits a crafted page or opens a malicious file. Exploitation requires user ...