WampServer 3.0.6 - Cross-Site Request Forgery

Exploit Title: WampServer 3.0.6 - Cross-Site Request Forgery Date: 2018-06-11 Exploit Author: L0RD Software Link: https://ufile.io/gpqh9 Vendor Homepage: http://www.wampserver.com/en/ Version: 3.0.6 - 64bit Tested on: Win 10 Description : An issue was discovered in WampServer 3.0.6 which allows a...

Microsoft Windows: Interactive logon: Do not require CTRL+ALT+DEL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winildisablecad.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Do not require CTRL+ALT+DEL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Microsoft Windows: Devices: Prevent users from installing printer drivers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windevicespreventusersprinterdrivers.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Devices: Prevent users from installing printer drivers Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Devices: Allowed to format and eject removable media

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windevicesformatejectremovable.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Devices: Allowed to format and eject removable media Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Logfile path

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogfilepath.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Path to logfile Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Windows Defender Firewall: Log dropped packets

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogdroppedpackets.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Log dropped packets Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Inbound connections

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofileinboundcon.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Inbound connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: firewall profiles status.

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilestatus.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Enable Firewall Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Microsoft Windows: Removable Disks: Deny execute access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windisksdenyexecuteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Removable Disks: Deny execute access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Important: Red Hat Security Advisory: vdsm security update

An update for vdsm is now available for RHEV 3.X Hypervisor and Agents Extended Lifecycle Support for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

SSRF Vulnerability in Jspxcms

Jspxcms is an open source, Java-based content management system CMS. Jspxcms suffers from an SSRF vulnerability. It allows an attacker to initiate requests to an intranet host to obtain banner information for web application reachable server services as well as collect fingerprinting of intranet...

Moodle 3.x Bypass Vulnerability (Jan 2018) - Linux

Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Moodle 3.x Bypass Vulnerability (Jan 2018) - Windows

Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

hBlock - Improve Your Security And Privacy By Blocking Ads, Tracking And Malware Domains

Improve your security and privacy by blocking ads, tracking and malware domains. What is this for? This POSIX-compliant shell script, designed for Unix-like systems, gets a list of domains that serve ads, tracking scripts and malware from multiple reputable sources and creates a hosts file that...

CVE-2018-9919

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, because...

Microsoft Windows: Maximum password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdmaxage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Maximum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2018-10174

The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...

Microsoft Office: Do not automatically hyperlink screenshots

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013noautohyperlinkscreenshots.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Do not automatically hyperlink screenshots Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable First Run Movie

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013firstrunmovie.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable First Run Movie Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Office: Allow including screenshot with Office Feedback

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013includescreenshotsofficefeedback.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Allow including screenshot with Office Feedback Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...