EUVD-2019-7085

Malware in sbrugna...

HP ThinPro Linux 安全漏洞

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux 7.2 Service Pack 8 SP8 that originates from an unauthorized attacker being able to modify certain files...

HP ThinPro 6.x / 7.x Privilege Escalation

HP ThinPro - Privilege escalation =============================================================================== Identifiers ------------------------------------------------- CVE-2019-16287 CVSSv3 score ------------------------------------------------- 6.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

ThinPro Linux VPN Arbitrary Command Execution

The vulnerability of the ThinPro Linux operating system’s VPN implementation exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands in superuser mode...

Citrix Receiver Command Execution

The vulnerability of the Citrix Receiver function in the ThinPro Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

ThinPro Linux Privilege Escalation

The vulnerability of the ThinPro Linux operating system is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges by creating a file in the local file system, which turns the device into an administrative...

ThinPro Linux Authorization Disclosure

The vulnerability of the ThinPro Linux operating system is related to incorrect authorization. Exploiting this vulnerability can allow an attacker to disclose protected information...

ThinPro Linux Authorization Bypass

The vulnerability of the ThinPro Linux operating system is related to incorrect authorization. Exploiting this vulnerability allows an attacker to execute arbitrary commands by modifying browser settings and launching a separate process...

HP ThinPro Linux Arbitrary Code Execution Vulnerability

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux that stems from the Citrix Receiver wrapper function not securely handling user-submitted input. An attacker could exploit the vulnerabilit...

HP ThinPro Linux Arbitrary Code Execution Vulnerability (CNVD-2019-43735)

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux that stems from a failure of the VPN software to securely process user-submitted input. The vulnerability can be exploited by an attacker t...

HP ThinPro Linux Arbitrary Code Execution Vulnerability (CNVD-2019-43732)

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux. An attacker could exploit this vulnerability to bypass the operating system application filter and execute arbitrary operating system...

HP ThinPro Linux Elevation of Privilege Vulnerability

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux. An attacker could exploit the vulnerability to obtain elevated privileges, create files on the local file system, and then execute command...

HP ThinPro Linux Information Disclosure Vulnerability

HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux. An attacker could exploit the vulnerability to transfer sensitive information to a local drive...

CVE-2019-16287

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed command...

CVE-2019-16287

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed command...

CVE-2019-16287: Undefined Security Weakness

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed command...

PT-2019-4423

Name of the Vulnerable Software and Affected Versions HP ThinPro Linux affected versions not specified Description The issue is related to incorrect authorization in the operating system, which can be exploited by changing browser preferences to launch a separate process. This process can then...

PT-2019-4455

Name of the Vulnerable Software and Affected Versions HP ThinPro Linux versions 6.2 through 7.1 Description The issue is related to insecure privilege management, allowing an attacker to create a file on the local file system that puts the device in Administrative Mode. This enables the attacker ...

PT-2019-4422

Name of the Vulnerable Software and Affected Versions ThinPro Linux affected versions not specified Description The issue is related to improper authorization in the operating system. If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able t...

CVE-2015-2124

Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors...