EUVD-2021-15845

Malware in sbrugna...

EUVD-2019-3638

Malware in sbrugna...

Crlf injection

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29205: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2016-4406

A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44...

CVE-2016-4406: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44...

HPE iLO 4 < 2.53 - Add New Administrator User

!/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP: https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769enus Other...

PT-2017-12573

Name of the Vulnerable Software and Affected Versions HPE iLO 4 versions prior to 2.53 HPE iLO 3 versions prior to 1.89 HPE iLO 2 versions prior to 2.30 Moonshot Remote Console Administrator versions prior to 2.50 Description A remote disclosure of information issue was found, which could be...

PT-2016-5940

Name of the Vulnerable Software and Affected Versions HPE iLO 3 versions prior to 1.88 HPE iLO 4 versions prior to 2.44 Description A remote cross-site scripting issue was identified, which could be exploited to allow Cross-Site Scripting XSS. This issue can be remotely exploited. Recommendations...