CVE-2018-7118

Summary: CVE-2018-7118 is a local access restriction bypass vulnerability in HPE Service Pack for ProLiant (SPP) Bundled Software prior to version 2018.09.0 . What is affected: SPP Bundled Software used with HP/ HPE ProLiant systems. Vulnerability: An attacker could bypass access restrictions at ...

PT-2019-11083

Name of the Vulnerable Software and Affected Versions: HPE Service Pack for ProLiant SPP Bundled Software versions prior to 2018.09.0 Description: A local access restriction bypass issue was identified. Recommendations: For versions prior to 2018.09.0, update to version 2018.09.0 or later to...

CVE-2018-7118: Undefined Security Weakness

A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant SPP Bundled Software earlier than version 2018.09.0...

[security bulletin] HPSBMU03030 rev.1 - HP Service Pack for ProLiant (SPP) Bundled Software running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04271396 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04271396 Version: 1 HPSBMU03030 rev....

ZonPHP V2.25 Remote Code Execute Vulnerability

Exploit for php platform in category web applications "; $headers = array"User-Agent: Mozilla/5.0 Windows NT 6.0; WOW64; rv:24.0 Gecko/20100101 Firefox/24.0", "Content-Type: text/plain"; $rc = curlinit; curlsetopt$rc, CURLOPTURL, $url.$path.$filename; curlsetopt$rc, CURLOPTHTTPHEADER, $headers;...

Cisco IOS XR Internet Control Message Protocol Denial of Service Vulnerability

Cisco IOS XR Software is affected by a denial of service DoS vulnerability that could allow an authenticated, local attacker to trigger a reload of the affected device by locally generating certain Internet Control Message Protocol ICMP messages. The vulnerability is due to a combination of Silic...

CVE-2007-1138

CVE-2007-1138 affects Cromosoft Simple Plantilla PHP (SPP). A vulnerability in list_main_pages.php allows absolute path traversal via the nfolder parameter, enabling remote attackers to list arbitrary directories and read arbitrary files. The issue is rooted in an improper handling of absolute pa...

CVE-2007-1138: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1139: Improper Control of Generation of Code

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...

CVE-2004-0063

The vulnerability CVE-2004-0063 affects the nCipher payShield SPP library (versions 1.3.12, 1.5.18, 1.6.18). The root cause is that the SPP_VerifyPVV function returns a Status_OK value even when the HSM reports a different status, which could lead applications to make incorrect security-critical ...

CVE-2004-0063: Undefined Security Weakness

The SPPVerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a StatusOK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number...