op5 Monitor Persistent Session Cookie

The remote web server has a version of op5 Monitor that improperly handles session cookies. The application sets an expiry date on cookies, causing logins to persist across sessions. Additionally, cookies are not reissued after login. Note that most versions affected by this vulnerability are als...

op5 Portal Detection

The remote web server hosts op5 Portal, a web interface platform that contains several other components produced by op5, notably op5 Monitor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57575; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

op5 Monitor Credential Leak

The version of op5 Monitor hosted on the remote web server contains an information disclosure vulnerability. In the default configuration, detailed error messages are enabled. An authenticated user, upon triggering an error, will be presented with sensitive data including database credentials, th...

Wireless Penetration Testing Series Part 2: Basic concepts of WLANs

Wireless Penetration Testing Series Part 2: Basic concepts of WLANs This blog post is in continuation of the Wireless Penetration Testing and Hacking series we started Part 1: Getting Started with Monitoring and Injection on the basis of the "SecurityTube Wi-Fi Security Expert" SWSE course which ...

OP5 welcome Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 welcome Remot...

OP5 license.php Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 license.php...

Blade API Monitor 3.6.9.2 Unicode Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false,...

Blade API Monitor 3.6.9.2 Buffer Overflow

Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false, EXITFUNC=process, CMD=calc encoder=Alpha3 ALPHA3\ALPHA3.py x86...

Blade API Monitor 3.6.9.2 - Unicode Stack Buffer Overflow

Blade API Monitor 3.6.9.2 - Unicode Stack Buffer Overflow Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false,...

Blade API Monitor 3.6.9.2 - Unicode Stack Buffer Overflow

Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false, EXITFUNC=process, CMD=calc encoder=Alpha3 ALPHA3\ALPHA3.py x86...

ITRS OP5 Monitor Detection (HTTP)

HTTP based detection of ITRS OP5 Monitor formerly op5 Monitor. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

op5 Monitor / Appliance < 5.5.3 Multiple RCE Vulnerabilities (Dec 2013)

op5 Monitor / Appliance is prone to multiple remote command execution RCE vulnerabilities because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

OP5 welcome Remote Command Execution

This module exploits an arbitrary root command execution vulnerability in OP5 Monitor welcome. Ekelow AB has confirmed that OP5 Monitor versions 5.3.5, 5.4.0, 5.4.2, 5.5.0, 5.5.1 are vulnerable. This module requires Metasploit: https://metasploit.com/download Current source:...

OP5 license.php Remote Command Execution

This module exploits an arbitrary root command execution vulnerability in the OP5 Monitor license.php. Ekelow has confirmed that OP5 Monitor versions 5.3.5, 5.4.0, 5.4.2, 5.5.0, 5.5.1 are vulnerable. This module requires Metasploit: https://metasploit.com/download Current source:...

An error message "Collecting thread has failed to initialize (Time difference between Veeam Monitor server and ESX host is too large. Make sure that NTP is enabled on ESX host and try again.) and will be stopped" in Veeam Monitor

Challenge The error "Connection problems" appears with vCenter server or ESXi host in Veeam ONE Monitor client infrastructure view. vCenter server or the ESXi host becomes grayed out: No data goes to the Veeam ONE Monitor client and into the Veeam ONE database. vCenter server or ESXi might be...

How to Edit Multiple Alarms at the Same Time

Purpose This article provides supplemental information regarding batch alarm editing. As documented in the Veeam ONE Monitoring Guide, in batch editing mode, you can only change the Assignment, Notifications, Actions, and Suppression alarm settings. Solution For information about modifying multip...

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94185...

CVE-2011-3330

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and...

Buffer overflow

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and...

CVE-2011-3330

Buffer overflow in the UnitelWay Windows Device Driver used by Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier allows local users to execute arbi...