Code injection

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

OWASP ZAP 2.3.0.1 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration...

HP Integrated Lights-Out unauthorized access

Information leakage of password...

JP1/Integrated Management - Service Support vulnerable to cross-site scripting

Overview JP1/Integrated Management - Service Support has a cross-site scripting vulnerability, which occurs when receiving a request that contains malicious scripts when being used with JP1/Integrated Management - View. Impact An attacker can exploit this vulnerability to execute malicious script...

Hitachi JP1/Integrated Management跨站脚本漏洞

Hitachi JP1/Integrated Management是实时监控服务器管理系统并且提交故障解决方案的综合管理系统。 由于某些关于查看的未明输入在返回用户钱未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器中执行任意HTML 和脚本代码。 0 Hitachi JP1/Integrated Management IM 厂商补丁： Hitachi ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

HP Integrated Lights-Out (iLO) Default Credentials

The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Nortel Meridian Integrated RAN Default Admin Credentials

The remote device is a Nortel Meridian Integrated RAN MIRAN that uses a set of known, default credentials 'admin' / 'admin000'. Knowing these, an attacker able to connect to the service can gain complete control of the device. Nortel MIRAN is a system card that provides multi-tasking voice...

MuPDF xps_parse_color()栈缓冲区溢出漏洞

No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...

[Websecurify] Web Security Testing Runtime

A Complete Suite Of Web Security Tools The Suite provides a complete and functional marketplace of highly integrated web application security tools. You will find that different areas are covered by various domain-specific solutions. The Suite consists of automated scanners, fuzzers, utilities an...

CVE-2013-6925

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

iLO 3 < 1.65 / iLO 4 < 1.32 Multiple Vulnerabilities

Description not available %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71494; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/19"; scriptcveid"CVE-2013-4842",...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

HP Integrated Lights-Out security vulnerabilities

Crossite scripting, information leakage...

CVE-2013-4843

HP Integrated Lights-Out 4 (iLO4) vulnerability CVE-2013-4843 affects firmware before 1.32. Remote authenticated users may disclose sensitive information via unknown vectors over the network; impact is information disclosure with no confidentiality/integrity changes stated. HP's security bulletin...

CVE-2013-4842

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4843

Unspecified vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-4842

HP Integrated Lights-Out (iLO4) firmware prior to 1.32 is affected by CVE-2013-4842, a cross-site scripting (XSS) vulnerability that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects HP iLO4 web interface and is identified in multiple vul...

PT-2013-5238 · Hewlett Packard · Hp Integrated Lights-Out 3 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 and 4 iLO3, iLO4 affected versions not specified Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. T...

PT-2013-5239 · Hewlett Packard · Hpe Integrated Lights-Out 4 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 iLO3 affected versions not specified Description: The issue allows remote authenticated users to obtain sensitive information via unknown vectors. It could also...

CVE-2013-5781

CVE-2013-5781 affects Oracle PARC Enterprise T4 Servers running Sun System Firmware prior to 8.3.0.b. Local users can impact confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager (ILOM). The description and related sources consistent...