EUVD-2007-6254

Malware in sbrugna...

EUVD-2006-6632

Malware in sbrugna...

HyperVM File Permissions Local Vulnerability

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

HyperVM weak permissions

Passwords and private keys are stored in world-readable file...

HyperVM File Permissions Local Vulnerability

No description provided by source. HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...

HyperVM - File Permissions Credential Disclosure

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

HyperVM File Permissions Local Vulnerability

Exploit for multiple platform in category local exploits ============================================ HyperVM File Permissions Local Vulnerability ============================================ HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private...

HyperVM - File Permissions Credential Disclosure

HyperVM - File Permissions Credential Disclosure HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...

HyperVM Plain Text Storage Of Password

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

CVE-2007-6287

Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-6287

Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-6287

CVE-2007-6287 is a cross-site scripting (XSS) vulnerability in the login page of HyperVM 2.0 by Lxlabs, where an attacker can inject arbitrary script via the frm_emessage parameter. This entry describes a different vector than CVE-2006-6649 and notes the provenance of the information as unknown a...

hypervm-xss.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: HyperVM Method: Cross-Site Scripting Vendor: http://hypervm.com PoC: victim::8888/display.php?frmaction=%22%3E%3Cscript%3Ealert'a'%3C/script%3E Contact: [email protected]...

CVE-2006-6649

Cross-site scripting XSS vulnerability in display.php in HyperVM 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an encoded frmaction parameter. NOTE: the vendor disputes this issue, but it is not certain whether the dispute is about the severity of the issue, o...

CVE-2006-6649

Cross-site scripting XSS vulnerability in display.php in HyperVM 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an encoded frmaction parameter. NOTE: the vendor disputes this issue, but it is not certain whether the dispute is about the severity of the issue, o...

CVE-2006-6649

CVE-2006-6649 describes a cross-site scripting (XSS) vulnerability in display.php of HyperVM 1.2 and earlier, exploitable via an encoded frm_action parameter. The weakness is disclosed in the CVE entry, which notes that the vendor disputes the issue and that the dispute could concern severity or ...

HyperVM Cross-Site Scripting

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: HyperVM Method: Cross-Site Scripting Vendor: http://hypervm.com PoC:...