Detection of various dangerous CGI scripts (HTTP) - Active Check

Various CGI scripts have known vulnerabilities tracked via the via the referenced CVEs. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also cove...

SimpleServer remote execution

By sending a specially encoded string to the remote server, it is possible to execute remote commands with the privileges of the server. SPDX-FileCopyrightText: 2001 Mathieu Meadele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Carello.dll <= 1.3 Command Execution Vulnerability

Carello.dll was found on the remote web server. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Interactive Story (story.pl) < 1.4 Directory Traversal Vulnerability

Interactive Story story.pl is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2001 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cherokee directory traversal flaw

The remote version of Cherokee is vulnerable to directory traversal flaw when appending a SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

vBulletin 'Calendar' Command Execution Vulnerability (CVE-2001-0475) - Active Check

A vulnerability in vBulletin enables attackers to craft special URLs that will execute commands on the server through the vBulletin PHP script. SPDX-FileCopyrightText: 2005 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

scan for UPNP hosts

Microsoft Universal Plug n Play is running on this machine. This service is dangerous for many different reasons. SPDX-FileCopyrightText: 2005 by John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...

Oracle 9i Application Server mod_plsql Directory Traversal Vulnerability - Active Check

In a default installation of Oracle 9i Application Server AS, it is possible to use the modplsql module to perform a directory traversal attack. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Apache HTTP Server Directory Listing

By making a request to the Apache HTTP server ending in SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Requests can be: /?M=A or /?S=D etc Note:...

PHP-Nuke <= 5.2 Arbitrary File Upload Vulnerability

PHP-Nuke is prone to an arbitrary file upload vulnerability in admin.php. SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Sambar pagecount Vulnerability - Active Check

By default, there is a pagecount script with Sambar Web Server located at http://sambarserver/session/pagecount. This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any files on the filesystem since the SPDX-FileCopyrightText: 2001 StrongHoldNet...

PHP-Nuke security vulnerability (bb_smilies.php)

The remote host seems to be vulnerable to a security problem in PHP-Nuke bbsmilies.php. The vulnerability is caused by inadequate processing of queries by PHP-Nuke SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Quake3 Arena 1.29 f/g DOS

It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cherokee remote command execution

The remote version of Cherokee is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to listen port. SPDX-FileCopyrightText: 2004 David Maciejak Some text...

WS_FTP Server Buffer Overflow Vulnerability (Nov 2005)

WSFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver";...

MDaemon IMAP Server DoS Vulnerability (CVE-2001-0584)

It is possible to crash the remote MDaemon IMAP server by sending a too long argument to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MDaemon IMAP Server DoS (CVE-2001-0064) - Active Check

It is possible to crash the remote MDaemon IMAP server by sending a long argument to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

ActivePerl perlIS.dll Buffer Overflow Vulnerability - Active Check

An attacker can run arbitrary code on the remote computer. This is because the remote IIS server is running a version of ActivePerl prior to 5.6.1.630 and has the Check that file exists option disabled for the perlIS.dll. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions...

HP-UX FTP Server - Directory Listing (Metasploit)

HP-UX FTP Server - Directory Listing Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv...