OpenBSD <= 4.5 (IP datagrams) Remote DoS Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affect...

Novell NetMail <= 3.52d NMAP STOR Buffer Overflow

No description provided by source. $Id: nmapstor.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Solaris <= 7.0 Recursive mutex_enter Panic Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the serv...

python-wrapper Untrusted Search Path/Code Execution Vulnerability

No description provided by source. python-wrapper untrusted search path/code execution vulnerability Python-wrapper executes any test.py script within the current working directory, when supplied with help'modules'. A non-priviledged user may gain code execution by tricking root to help'modules' ...

Cisco IOS <= 12.0.2 Syslog Crash

No description provided by source. source: http://www.securityfocus.com/bid/675/info Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue...

Network Tool 0.2 PHPNuke Addon Metacharacter Filtering Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3552/info Network Tool is a PHPNuke addon, written and maintained by Rick Fournier. It is designed to offer network features such as nmap, traceroute, and ping from a web interface. A problem with the package has been...

Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 Port Scan DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1150/info Performing a TCP SYN or TCP connect scan on a host running Symantec pcAnywhere will cause the program to crash. Restarting the application is required in order to regain normal functionality. nmap -sS target...

Enterasys SSR8000 SmartSwitch Port Scan Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5703/info The SSR8000 is a SmartSwitch distributed and maintained by Enterasys. It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TC...

Check Point Software Firewall-1 3.0/1 4.0 Table Saturation Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1 handles TCP connections. Typically to initiat...

Data General DG/UX 5.4 inetd Service Exhaustion Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon...

Tenda W309R Router 5.07.46 - Configuration Disclosure

No description provided by source. --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO @s4n7h0 Vendor Homepage: http://www.tenda.cn Product link: http://www.tenda.cn/tendacn/product/show.aspx?productid=382...

OpenBSD 3.x PF RDR Network Information Leakage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8082/info OpenBSD PF is prone to an information leakage vulnerability when configured to redirect incoming traffic from standard ports to high ports. This occurs because PF responds different to packets destined for activ...

jsDelivr: Using nmap revealing sensitive information

check this = http://prntscr.com/3xlww2 nmap scan result . Starting Nmap 6.46 http://nmap.org at 2014-06-29 15:34 India Standard Time NSE: Loaded 30 scripts for scanning. NSE: Script Pre-scanning. Initiating Parallel DNS resolution of 1 host. at 15:35 Completed Parallel DNS resolution of 1 host. a...

Smart Pentester - An SSH based Penetration Testing Framework

Smart Pentester is an SSH based Penetration Testing Framework. It provides a GUI for well known tools like nmap, hping, tcpdump, volatility, hydra and etc. Smart Pentester Framework will provide you a User Interface for Penetration testing, Malware Analysis, Forensic Analysis, Cyber Intelligence,...

s7-info NSE Script

Enumerates Siemens S7 PLC Devices and collects their device information. This script is based off PLCScan that was developed by Positive Research and Scadastrangelove . This script is meant to provide the same functionality as PLCScan inside of Nmap. Some of the information that is collected by...

openSUSE Security Update : nmap (openSUSE-SU-2013:1561-1)

nmap was updated to fix the http-domino-enum-passwords scripts. If you ran the fortunately non-default http-domino-enum-passwords script with the fortunately also non-default domino-enum-passwords.idpath parameter against a malicious server, it could cause an arbitrarily named file to to be writt...

openSUSE Security Update : nmap (openSUSE-SU-2013:1579-1)

nmap was updated to fix bnc844953/CVE-2013-4885: There was a vulnerability in one of our 437 NSE scripts. If you ran the fortunately non-default http-domino-enum-passwords script with the fortunately also non-default domino-enum-passwords.idpath parameter against a malicious server, it could caus...

Hostscan - PHP tool for scanning specific range of hosts

Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side soft. How it...

http-cisco-anyconnect NSE Script

Connect as Cisco AnyConnect client to a Cisco SSL VPN and retrieves version and tunnel information. Script Arguments slaxml.debug See the documentation for the slaxml library. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library...

http-vuln-cve2014-2128 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SSL VPN Authentication Bypass Vulnerability CVE-2014-2128. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2127.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...