PunBB < 1.2.7 Multiple Vulnerabilities

The version of PunBB installed on the remote host suffers from several flaws. - Multiple SQL Injection Vulnerabilities The application fails to adequately sanitize user- supplied input to the 'searchid' parameter of the 'search' script as well as an unspecified parameter in one of the admin scrip...

NOD32 Antivirus ARJ Archive Filename Handling Overflow

The remote host is running NOD32 Antivirus, from eset. The installed version of NOD32 Antivirus is reportedly prone to a heap-based buffer overflow when processing ARJ archives with long filenames. An attacker may be able to exploit this issue to execute arbitrary code on the remote host. C Tenab...

RHEL 4 : exim (RHSA-2005:358)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:358 advisory. Exim is a mail transport agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. An integer overflow fla...

HP Data Protector Detection

HP Data Protector formerly HP OpenView Storage Data Protector, a data management solution that automates backup and recovery, is running on the remote host. Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Changes by Tenable: 2016 May 17 Added banner string detection for new HP naming scheme HPE -...

Land Down Under < 802 events.php SQL Injection

Binary data 3209.prm...

WebGUI < 6.7.3 Multiple Command Execution Vulnerabilities

The remote host is running WebGUI, a content management system from Plain Black Software. According to its banner, the installed version of WebGUI on the remote host fails to sanitize user-supplied input to various sources before using it to run commands. By leveraging these flaws, an attacker ma...

CUPS Server 1.1 - GET Denial of Service

CUPS Server 1.1 - GET Denial of Service / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL =...

CUPS Server <= 1.1 (Get Request) Denial of Service Exploit

Exploit for linux platform in category dos / poc ========================================================== CUPS Server include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0 fprintfstdout, "cups/1.x server freeze and remote cpu usage fuckup\n"; fprintfstdout,...

w-Agora index.php site Parameter Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...

AWStats Referrer Header Arbitrary Command Execution

The remote host is running AWStats, an open source web analytics tool used for analyzing data from internet services such as web, streaming, media, mail and FTP servers. The version of AWStats installed on the remote host collects data about the web referrers and uses them without proper sanitati...

SilverNews < 2.0.4 Multiple Vulnerabilities

The remote host is running SilverNews, a free news script written in PHP. The version of SilverNews installed on the remote host suffers from several flaws : - SQL Injection Vulnerability The application does not sanitize user-supplied input to the 'username' parameter of the 'admin.php' script...

Comdev eCommerce 3.0 Multiple Vulnerabilities (RFI, Traversal)

The remote host is running eCommerce, a web-based shopping system from Comdev. The installed version of eCommerce allows remote attackers to control the 'pathdocroot' parameter used when including PHP code in the 'config.php' script. By leveraging this flaw, an attacker may be able to view...

Ares Fileshare Detection

Ares Fileshare is installed on the remote host. Ares Fileshare is a P2P application that supports connecting to several P2P networks; eg, Gnutella and OpenFT. As such, it may not be suitable for use in a business environment. In addition, note that it's not possible for Nessus to determine the...

CA ARCServe MSSQL Agent Detection

The BrightStor ARCServe MSSQL Agent is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19376; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"CA ARCServe MSSQL Agent...

GLSA-200507-24 : Mozilla Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-24 Mozilla Suite: Multiple vulnerabilities The following vulnerabilities were found and fixed in the Mozilla Suite: 'mozbugra4' and 'shutdown' discovered that the Mozilla Suite was improperly cloning base objects MFSA...

SUSE-SA:2005:043: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:043 zlib. The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer...

PHP-Fusion <= 6.00.106 Multiple Vulnerabilities

According to its banner, the remote host is running a version of PHP-Fusion that suffers from multiple vulnerabilities : - SQL Injection Vulnerability The application fails to sanitize user-supplied input to the 'msgview' parameter of the 'messages.php' script before using it in database queries...

Advanced Guestbook User-Agent Header HTML Injection

The remote host is running Advanced Guestbook, a free guestbook written in PHP. The installed version of Advanced Guestbook fails to properly sanitize the 'HTTPUSERAGENT' environment variable before using it in dynamically-generated content. An attacker can exploit this flaw to launch cross-site...

SAP Internet Graphics Server (IGS) Directory Traversal Vulnerability

The version of SAP Internet Graphics Server IGS installed on the remote host is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP GET request, to access arbitrary files on the remote host with the privileges of the...

Hosting Controller Software Detection

The remote host is running Hosting Controller, a commercial web-hosting automation suite for the Windows Server family platform. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19254; scriptversion"1.15"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hosting...