Square: Delayed, fraudulent transactions possible with encrypted Square Reader devices due to lack of server-side verification of device transaction counter

Although Square Readers implement encryption, possibly with a Derived Unique Key Per Transaction DUKPT scheme, the transaction counter of a Square Reader device is not verified when performing server-side decryption of swipe data. During a valid sale, a malicious merchant or third party can recor...

Solaris 10 (sparc) : 148582-08 (deprecated)

Instant Messaging and Presence SDK 9.0: security patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 148582 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Solaris 10 (sparc) : 151561-01 (deprecated)

SunOS 5.10: libsharenfs.so.1 patch. Date this patch was last updated by Sun : Nov/15/14 This plugin has been deprecated and either replaced with individual 151561 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 151562-01 (deprecated)

SunOS 5.10x86: libsharenfs.so.1 patch. Date this patch was last updated by Sun : Nov/15/14 This plugin has been deprecated and either replaced with individual 151562 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

FreePBX (All Versions) RCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We would like to announce that a significant security vulnerability has been discovered in all current versions of FreePBX. A CVE has been requested from Mitre, but has yet to be provided. Further details as they come to hand will be available from...

SSL/TLS Version Detection

Check if a server supports a given version of SSL/TLS and cipher suites. The certificate is stored in loot, and any known vulnerabilities against that SSL version and cipher suite combination are checked. These checks include POODLE, deprecated protocols, expired/not valid certs, low key strength...

Juniper JunosE Malformed ICMP Remote DoS (JSA10651) (deprecated)

According to its version, the remote Juniper E-Series device is potentially affected by a denial of service vulnerability. This issue is caused by improper processing of malformed ICMP packets into the log format for 'icmpTraffic' logging when 'DEBUG' severity is selected. Note that devices with...

RelateIQ: Relateiq SSLv3 deprecated protocol vulnerability.

Relateiq Website service encrypts traffic using an old deprecated protocol with known weakness wich is obsolete and insecure, you should disable it. POC in the attachments. https://foundeo.com/products/iis-weak-ssl-ciphers/test.cfm?testdomain=www.relateiq.com...

masscan (NASL wrapper)

This VT is deprecated. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105924";...

Jenkins-CI Login Utility

This module attempts to login to a Jenkins-CI instance using a specific user/pass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/credentialcollection' require...

X (Formerly Twitter): Twitter Flight SSL 2.0 deprecated protocol vulnerability.

Twitterflight.com From Twitter Inc..I just checked it with whois Website service encrypts traffic using an old deprecated protocol with known weakness wich is obsolete and insecure, you should disable it. POC in the attachments...

Solaris 10 (sparc) : 150312-06 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

RAPIDSHARE Cloud Service Detection (deprecated)

Binary data 8505.prm...

Solaris 10 (sparc) : 150817-04 (deprecated)

VM Server for SPARC 3.1: ldmd patch. Date this patch was last updated by Sun : Dec/11/14 This plugin has been deprecated and either replaced with individual 150817 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 138195-04

Service Tags 1.0: patch for Solaris 10. Date this patch was last updated by Sun : Mar/19/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated it duplicates solaris138195.nasl. Disabled on 2014/09/03. C Tenable Network Security, Inc. The descriptive text in this plugin was extracted...

Tenable Appliance Check (deprecated)

This plugin was previously used to detect if the local scanner was using the Tenable Appliance. It is no longer needed, and is now obsolete. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77329; scriptversion "1.2"; scriptcvsdate"Dat...

Solaris 10 (x86) : 151010-92 (deprecated)

JavaSE 8x86: update 92 patch equivalent. Date this patch was last updated by Sun : Apr/18/16 This plugin has been deprecated and either replaced with individual 151010 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (sparc) : 151009-92 (deprecated)

JavaSE 8: update 92 patch equivalent to J. Date this patch was last updated by Sun : Apr/18/16 This plugin has been deprecated and either replaced with individual 151009 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

symantec web gateway 5.0.2.8 - Multiple Vulnerabilities

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...

Solaris 10 (sparc) : 123611-05 (deprecated)

X11 6.6.2: Trusted Extensions patch. Date this patch was last updated by Sun : Jun/14/14 This plugin has been deprecated and either replaced with individual 123611 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...