WordPress Plugin All In One WP Security 3.8.2 - SQL Injection

WordPress Plugin All In One WP Security 3.8.2 - SQL Injection Advisory ID: HTB23231 Product: All In One WP Security WordPress plugin Vendor: Tips and Tricks HQ, Peter, Ruhul, Ivy Vulnerable Versions: 3.8.2 and probably prior Tested Version: 3.8.2 Advisory Publication: September 3, 2014 without...

Hyperic HQ 3.2 - 4.2-beta1 - Multiple XSS

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...

Multiple SpringSource Products Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38913/info Multiple SpringSource Products are prone to multiple HTML-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

CVE-2013-6366

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

CVE-2013-6366

CVE-2013-6366 affects VMware Hyperic HQ 4.6.6 via the Groovy script console. The vulnerability allows remote authenticated administrators to execute arbitrary code through a Runtime.getRuntime().exec call. Root cause: insecure Groovy console exposure enabling code execution. Impact: arbitrary cod...

CVE-2013-6366

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

VMware Hyperic HQ Groovy Script-Console - Java Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VMware Hyperic HQ...

VMware Hyperic HQ Groovy Script-Console Java Execution Vulnerability

This Metasploit module uses the VMware Hyperic HQ Groovy script console to execute OS commands using Java. Valid credentials for an application administrator user account are required. This Metasploit module has been tested successfully with Hyperic HQ 4.6.6 on Windows 2003 SP2 and Ubuntu 10.04...

VMware Hyperic HQ Groovy Script-Console Java Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VMware Hyperic HQ...

CVE-2009-2899

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

Default credentials

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

CVE-2009-2899

The CVE-2009-2899 entry concerns SpringSource Hyperic HQ (pre-4.3) where a monitor Perl script in the Sybase plug‑in allows local users to obtain the database password by listing the process and its arguments. Affected component: Hyperic HQ monitor script; root cause: information disclosure via p...

CVE-2009-2899

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting Multiple Security Vulnerabilities

Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting Multiple Security Vulnerabilities source: https://www.securityfocus.com/bid/50456/info Hyperic HQ Enterprise is prone to a cross-site scripting vulnerability and multiple unspecified security vulnerabilities. An attacker may leverage the cross-si...

Hyperic HQ Enterprise|E 4.5.1 Cross Site Request Forgery / Cross Site Scripting

Title: ====== Hyperic HQ Enterprise|E v4.5.1 - Multiple Vulnerabilities Date: ===== 2011-08-08 VL-ID: ===== 240 Introduction: ============= Designed for companies who run large scale business-critical web applications and systems and want world-class support. Prepare to be amazed. Award-winning...

MySpace Clone 2010 Multiple Vulnerabilies

Exploit for php platform in category web applications ========================================= MySpace Clone 2010 Multiple Vulnerabilies ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Clix'N'Cash Clone 2010 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Clix'N'Cash Clone 2010 SQL Injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Swoopo Clone 2010 - SQL Injection

Swoopo Clone 2010 - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Swoopo Clone 2010 SQL Vunerable Vendor url:http://www.euro-hq.com...

Hyperic HQ Web GUI Detection

A web-based interface for Hyperic HQ, a web- and enterprise- application management system, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45357; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hyperic HQ Web GUI...

CVE-2009-2907

Multiple cross-site scripting XSS vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite AMS before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers t...