HP SiteScope code execution

Code execution via SOAP...

[security bulletin] HPSBGN02904 rev.1 - HP SiteScope running SOAP, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03861260 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03861260 Version: 1 HPSBGN02904 rev....

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 8086)

The following security issues have been fixed : - bnc828020:. CVE-2013-4635 - Integer overflow in SdnToJewish - bnc807707:. CVE-2013-1635 / CVE-2013-1643 - reading system files via untrusted SOAP input - soap.wsdlcachedir function did not honour PHP openbasedir - bnc829207:. CVE-2013-4113 - heap...

vtiger CRM <= 5.4.0 (SOAP Services) - Multiple Vulnerabilities

Exploit for php platform in category web applications 1 The vulnerable code is located in the getlistvalues SOAP method defined in /soap/customerportal.php: 1528. function getlistvalues$id,$module,$sessionid,$onlymine='true' 1529. 1530. requireonce'modules/'.$module.'/'.$module.'.php'; 1531...

vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities

vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities --------------------------------------------------------------------------------- vtiger CRM debug"Entering customer portal function getlistvalues"; 2 The vulnerable code is located in the getprojectcomponents SOAP method defined in...

HP SiteScope Multiple Unspecified Remote Code Execution Vulnerabilities

The version of HP SiteScope installed on the remote host is potentially affected by the following code execution vulnerabilities : - Unspecified errors exist related to SOAP functionality for which no further details have been provided. CVE-2013-2367 - An error exists related to handling the SOAP...

vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities

--------------------------------------------------------------------------------- vtiger CRM debug"Entering customer portal function getlistvalues"; 2 The vulnerable code is located in the getprojectcomponents SOAP method defined in /soap/customerportal.php: 2778. function...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...

CVE-2013-2367

CVE-2013-2367 concerns HP SiteScope (versions 11.20/11.21) with a vulnerability in the SOAP interface, allowing remote code execution via the runOMAgentCommand SOAP path. Connected sources confirm an RCE vector related to the SOAP handling and the runOMAgentCommand entry, with multiple references...

CVE-2013-2367

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection Persistent Cross-Site Scripting

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection Persistent Cross-Site Scripting...

OpenEMM-2013 8.10.380.hf13.0.066 Cross Site Scripting / SQL Injection

import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file:...

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection / Stored XSS

Exploit for jsp platform in category web applications import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file...

D-Link Devices UPnP SOAP Command Execution Vulnerability

Different D-Link Routers are vulnerable to OS command injection in the UPnP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the CMD target. Additionally, two targets are included, to start a telnetd service and establi...

D-Link Devices UPnP SOAP Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link Devices UPnP SOAP Command...

Updated python-suds package fixes security vulnerability

An insecure temporary directory use flaw was found in the way python-suds performed initialization of its internal file-based URL cache predictable location was used for directory to store the cached files. A local attacker could use this flaw to conduct symbolic link attacks, possibly leading to...

PT-2013-3603 · No Company Name Mentioned In The Text · Suds

Name of the Vulnerable Software and Affected Versions: Suds version 0.4 Description: The issue in Suds allows local users to potentially redirect SOAP queries and have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. This occurs when the tempdir...

SAP NetWeaver SOAP Request SXPG_COMMAND_EXECUTE Command Execution

A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface. The vulnerability is due to insufficient validation of incoming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted SOAP request to the affected...

ReadyMedia - Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/61282/info ReadyMedia is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service...

D-Link Devices UPnP SOAP Command Execution

Different D-Link Routers are vulnerable to OS command injection in the UPnP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested on DIR-865 and DIR-645 devices. This module requires Metasploit:...