HP Comware Devices Detect (SSH Banner)

SSH banner-based detection of HP Comware Devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HPSBGN3552 rev.1 HP Secure Boot UEFI Update

Potential Security Impact Secure Boot Bypass VULNERABILITY SUMMARY HP UEFI update to support Microsoft's enhanced protection of Windows secure boot policies. RESOLUTION HP has provided firmware updates to address the vulnerability for HP PCs with UEFI Firmware. To acquire the firmware updates, go...

HP Network Node Manager i (NNMi) Detection

Detection of HP Network Node Manager i NNMi The script sends a connection request to the server and attempts to detect the presence of NNMi and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03653)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP KeyView Memory Corruption Vulnerability

HP KeyView is a suite of file filtering and conversion software from Hewlett-Packard HP. The software supports the extraction of content, metadata and other relevant attributes from files on multiple platforms. A memory corruption vulnerability exists in HP KeyView that could be exploited by an...

HP System Management Homepage SetSMHData admin-group Parameter Handling RCE

The HP System Management Homepage SMH running on the remote host is affected by a remote code execution vulnerability due to an overflow condition in the modsmhconfig.so library caused by improper validation of user-supplied input when parsing the admin-group parameter supplied to the...

HP KeyView Information Disclosure Vulnerability

HP KeyView is a suite of file filtering and conversion software from Hewlett-Packard HP. The software supports the extraction of content, metadata and other relevant attributes from files on multiple platforms. An information disclosure vulnerability exists in HP KeyView that could be exploited b...

HP System Management Homepage < 7.6 Multiple Vulnerabilities (HPSBMU03653) (httpoxy)

According to its banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.6. It is, therefore, affected by the following vulnerabilities : - A heap buffer overflow condition exists in OpenSSL in the EVPEncodeUpdate function within file...

HPSBGN3551 rev. 2- HP Hotkey, Escalation of Privilege

Potential Security Impact Elevation of Privilege VULNERABILITY SUMMARY Hotkey Support service used an unquoted service path. An attacker who had physical access to the system may gain elevated privileges by inserting an executable file in the path of the affected service RESOLUTION Download and...

Hewlett Packard TouchSmart Calendar Service 4.1.4245 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard TouchSmart Calendar Service File version : 4.1.4245 HP TouchSmart Calendar is a shared calendar where you c...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard TouchSmart Calendar Service File version : 4.1.4245 HP TouchSmart Calendar is a shared calendar where you c...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

HP ArcSight WINC Connector Remote Code Execution Vulnerability

HP Arcsight is a unified security solution that enables advanced correlation analysis, log management and user activity monitoring. A remote code execution vulnerability exists in the HP ArcSight WINC Connector, which can be exploited by an attacker to execute arbitrary code in the context of an...

store.hp.com XSS vulnerability

Vulnerable URL: http://store.hp.com/GermanyStore/Merch/Product.aspx?id=D3Q16B=A81=PRN=cpr163id/de/de/ips/iito/pagewidepro/shopnow&6'/ Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 14:55 GMT Vulnerability type:| XSS Vulnerability status:|...

store.hp.com XSS vulnerability

Vulnerable URL: http://store.hp.com/FranceStore/Merch/Product.aspx?id=D3Q16B=A81=PRN=cpr163id/fr/fr/ips/iito/pagewidepro/shopnow&666'/ Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 14:55 GMT Vulnerability type:| XSS Vulnerability status:|...

store.hp.com XSS vulnerability

Vulnerable URL: http://store.hp.com/FranceStore/Merch/Offer.aspx?p=b-mobconnect&666'/ Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 14:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

HP Client - Automation Command Injection / Remote Code Execution

Exploit for multiple platform in category local exploits Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on...

HP Client 9.19.08.17.9 - Command Injection

HP Client 9.19.08.17.9 - Command Injection Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1...

HP Client Automation 7.9 Command Injection

Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016\n Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1 too Tested on: Windows 7 and CentOS...

HP Client 9.1/9.0/8.1/7.9 - Command Injection

Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1 too Tested on: Windows 7 and CentOS releas...