CVE-2004-0260

The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||...

APC AP9606 backdoor account

Universal password is TENmanUFactOryPOWER...

APC 9606 SmartSlot Web/SNMP management card "backdoor"

Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...

Bagle.B Worm Detection

The remote host has the Bagle.B worm installed. This is a variant of the Bagle worm which spreads via email and has a backdoor that listens on port 8866. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12063; scriptversion"1.26"; scriptcvsdate"Date: 2019/11/25";...

apc_9606_backdoor.txt

Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...

[Full-Disclosure] CactuSoft CactuShop 5.0 Lite shopping cart software backdoor

S-Quadra Advisory 2004-02-06 Topic: CactuSoft CactuShop 5.0 Lite shopping cart software backdoor Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040206.txt Release date: 06 Feb 2004 1. DESCRIPTION CactuShop is an ASP application for runni...

MyDoom Virus Backdoor Detection

The MyDoom backdoor is listening on this port. An attacker may connect to it to retrieve sensitive information, e.g. passwords or credit card numbers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. rev 1.7: fixes a bug introduced in rev 1.6 spotted by Phil Bordelon rev 1.6: MyDoom.B detecti...

CVE-2003-1161

exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing WCLONE|WALL to the syswait4 function...

Planet switches unauthorized access

There is a backdoor account 'superuser' with 'planet' password via any VLAN...

Les Visiteurs v2.0.1 code injection vulnerability

Les Visiteurs is a great statistics script written in php. It gives you some graphicals informations on visitors of your website. This script was distributed by phpinfo.net but is no more maintained since a year. --------- In this version severals unprotected includes can be found in files: -...

Wollf Backdoor Detection

This host appears to be running Wollf on this port. Wollf Can be used as a Backdoor which allows an intruder gain remote access to files on your computer. If you did not install this program for remote management then this host may be compromised. An attacker may use it to steal your passwords, o...

Fluxay Sensor Detection

This host appears to be running Fluxay Sensor on this port. Fluxay Sensor is a backdoor that allows an intruder to gain remote access to files on your computer. Similar to SubSeven, this program installs as a service and is password protected to make it difficult to stop or remove it. An attacker...

FsSniffer Backdoor Detection

This host appears to be running FsSniffer on this port. FsSniffer is backdoor which allows an intruder to steal PoP3/FTP and other passwords you use on your system. An attacker may use it to steal your passwords. This script was written by Joseph Mlodzianowski Changes by Tenable: - Revised plugin...

RemoteNC Backdoor Detection

This host appears to be running RemoteNC on this port RemoteNC is a Backdoor which allows an intruder gain remote control of your computer. An attacker may use it to steal your passwords. This script was written by Joseph Mlodzianowski thanks to H.D.Moore include"compat.inc"; ifdescription...

MS03-039 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...

Bugbear.B Worm Detection

The BugBear.B backdoor appears to be listening on this port. An attacker may connect to it to retrieve secret information such as passwords, credit card numbers, etc. The BugBear.B worm includes a keylogger and can kill antivirus and firewall software. It propagates through email and open Windows...

Bugbear.B Web Backdoor Detection

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. C 2003 StrongHoldNet Licence : GPL v2 Modifications by rd: - Try every web server, not just port 81 UNTESTED include"compat.inc"; if description scriptid11707; scriptversion "1.11";...

Interbase/Firebird - external file security bug

Class: IB/FB can create or modify all accessible files on disk Remote: YES Localy: YES Vulnerable: IB 6.01, IB6.5, FB 1.0.2 WIN/Linux Not Vulnerable: IB7.0 Not Tested: FB 1.5 Beta Overview: IB/FB support external file for table. Data store in raw format and there isn't access rectriction. If file...

Vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host.

There is a vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host. The exploit was tested on Windows and as far as I know it will only work on windows.. It will not work on nix because of file permissions. Upload Lite 3.22 from PerlScriptsJavaScripts.c...

Unpassworded 'backdoor' Account

The account 'backdoor' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11250; scriptversion"1.37";...