Authentication flaw

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

HP OpenView Performance Insight Server Backdoor Account

Nessus was able to log into the remote HP OpenView Performance Insight system using a hidden account. The 'hch908v' user, hard-coded in the 'com.trinagy.security.XMLUserManager' class, is hidden and has administrative privileges. A remote attacker could exploit this by logging in as the hidden us...

CVE-2011-0276

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

HP OpenView Performance Insight Server Detection

The web interface for HP OpenView Performance Insight was detected on the remote host. This software helps assess the availability and performance of network services. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51849; scriptversion"1.7"; scriptcvsdate"Date:...

CVE-2011-0276

HP OpenView Performance Insight Server (OVPI) versions 5.2, 5.3, 5.31, 5.4, and 5.41 are affected by a remote code execution vulnerability due to a hidden account in the com.trinagy.security.XMLUserManager Java class. The vulnerability allows an attacker to trigger the doPost() method of com.trin...

HP OpenView Performance Insight Server Backdoor Account

Binary data 5754.prm...

HP Performance Insight Detection

Binary data 5753.prm...

Microsoft Windows HID Functionality (Over USB) Code Execution Vulnerability (Jan 2011)

A USB device driver software is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Performance Insight Server. Authentication is not required to exploit this vulnerability. The specific vulnerability is due to a hidden account present within the...

HP OpenView Performance Insight Server Backdoor Account Code Execution

This module exploits a hidden account in the com.trinagy.security.XMLUserManager Java class. When using this account, an attacker can abuse the com.trinagy.servlet.HelpManagerServlet class and write arbitrary files to the system allowing the execution of arbitrary code. NOTE: This module has only...

Oracle VM VirtualBox Extensions Local Privilege Escalation Vulnerability

This host is installed with Oracle VirtualBox and is local privilege escalation Vulnerability vulnerability. OpenVAS Vulnerability Test $Id: gboraclevirtualboxlocprevesclvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Oracle VM VirtualBox Extensions Local Privilege Escalation Vulnerability Author...

Mandriva Update for cyrus-sasl MDVA-2011:002 (cyrus-sasl)

Check for the Version of cyrus-sasl OpenVAS Vulnerability Test Mandriva Update for cyrus-sasl MDVA-2011:002 cyrus-sasl Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

HP SMH Insight Diagnostics Cross Site Scripting Vulnerability - Windows

The host is running HP SMH with Insight Diagnostics and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhpsmhinsightdiagxssvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ HP SMH Insight Diagnostics Cross Site Scripting Vulnerability - Windows Authors: Veerendra G...

HP SMH Insight Diagnostics Cross Site Scripting Vulnerability - Linux

The host is running HP SMH with Insight Diagnostics and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhpsmhinsightdiagxssvulnlin.nasl 7024 2017-08-30 11:51:43Z teissa $ HP SMH Insight Diagnostics Cross Site Scripting Vulnerability - Linux Authors: Veerendra GG...

Oracle Real User Experience Insight rsynclogdird SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL on vulnerable installations of Oracle Real User Experience Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within a portion of the application which parses log files. Due to the...

HP System Management Homepage (SMH) Insight Diagnostics XSS Vulnerability (HPSBMA02615) - Windows

HP System Management Homepage SMH with Insight Diagnostics is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP System Management Homepage (SMH) Insight Diagnostics XSS Vulnerability (HPSBMA02615) - Linux

HP System Management Homepage SMH with Insight Diagnostics is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mandriva Update for openoffice.org-voikko MDVA-2011:001 (openoffice.org-voikko)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/local/bin/perl Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC Vendor: Insight Software Solutions, Inc. Product web page: http://www.macros.com Affected version: 4.2.2.1 and 4.2.1.1 Summary: Macro Express is the...

Macro Express Pro 4.2.2.1 - .MXE File Syntactic Analysis Buffer Overflow (PoC)

Macro Express Pro 4.2.2.1 - .MXE File Syntactic Analysis Buffer Overflow PoC !/usr/local/bin/perl Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC Vendor: Insight Software Solutions, Inc. Product web page: http://www.macros.com Affected version: 4.2.2.1 and 4.2.1.1 Summar...