Openlink Virtuoso Server Detection

Openlink Virtuoso Server, a hybrid database server available as a commercial as well as an open source product is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33588; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate...

SA-2008-038 - Services - Arbitrary code execution

The Services module package was created out of a need for a standardized solution to integrate external applications with Drupal. It builds on concepts from Drupal core's XMLRPC interface, but abstracts service callbacks so that they may be used with multiple interfaces such as XMLRPC, SOAP, REST...

Server: insufficient buffer size for search patterns

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service slapd crash and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression...

Malware Payload Code detection

The remote port seems to be sending the payload of a malware. This is used by some worms when spreading by infecting other hosts. The system is probably infected by a worm or a Trojan horse. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by Michel Arboi Many thanks t...

MobiLink Server Detection

The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31718; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

solidDB Default Credentials

The remote instance of solidDB uses known credentials to control access. With these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31681;...

XSTUNT Server Detection

The remote service is an XSTUNT server. XSTUNT is a variation on STUNT Simple Traversal of UDP Through NATs and TCP too, which extends STUN to include TCP functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

KiSS PC-Link Server Detection (UDP)

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player, and this port is used by a player when searching for a PC-Link server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31465; scriptversion"1.8";...

RAPI Manager Detection

The remote service supports the Remote Applications Programming Interfaces RAPI protocol and is used by the host to manage connections from Windows Mobile / Windows CE devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...

Tor Server Detection

The remote service appears to be a Tor server. Tor is a proxy service designed to protect the anonymity of its users. It can also be used to support hidden services. TRUSTED...

PostgreSQL Server Detection

The remote service is a PostgreSQL database server, or a derivative such as EnterpriseDB. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26024; scriptversion"1.25"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/09/24"; scriptnameenglish:"PostgreSQ...

UltraVNC w/ DSM Plugin Detection (2)

UltraVNC seems to be running on the remote port. Upon connection, the remote service on this port sends pseudo-random bytes. It is probably UltraVNC with the new DSM encryption plugin. This plugin tunnels the RFB protocol into a RC4 or AES encrypted stream. %NASLMINLEVEL 70300 C Tenable Network...

Symantec Web Security (SWS) Multiple Vulnerabilities

According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25446;...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit 2

Exploit for unknown platform in category remote exploits ================================================================== CA BrightStor ARCserve msgeng.exe Remote Heap Overflow Exploit 2 ================================================================== !/usr/bin/perl original exploit by...

SSL Cipher Suites Supported

This plugin detects which SSL ciphers are supported by the remote service for encrypting communications. TRUSTED...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

OmniHTTPd pro long POST DoS

The remote host is running OmniHTTPd Pro HTTP Server. The remote version of this software seems to be vulnerable to a buffer overflow when handling specially long POST request. This may allow an attacker to crash the remote service, thus preventing it from answering legitimate client requests...

Microsoft SQL Server (MSSQL) Hello Overflow Vulnerability (Q316333) - Active Check

Microsoft SQL Server MSSQL is prone to a hello overflow vulnerability. SPDX-FileCopyrightText: 2002 Dave Aitel Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tutos < 1.1.20040412 Input Validation Vulnerability

Tutos is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tutos:tutos"; ifdescriptio...

INN buffer overflow

The remote version of this INN InterNetNews server does not do proper bounds checking. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...