Novell NetWare SMB Transaction Secondary Request DoS - Ver2

A vulnerability exists in Novell NetWare. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption for Win8+

EternalBlue exploit for Windows 8, Windows 10, and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target Tested on: - Windows 2012 R2 x64 - Windows 8.1 x64 - Windows 10 Pro Build 10240 x64 - Windows 10 Enterprise...

Security Bulletin: Vulnerability in Flexera InstallAnywhere affects IBM eDiscovery Analyzer (CVE-2016-4560)

Summary Flexera InstallAnywhere has a security vulnerability that could be exploited in IBM eDiscovery Analyzer. Vulnerability Details CVEID:CVE-2016-4560 DESCRIPTION:Flexera InstallAnywhere could allow a remote attacker to execute arbitrary code on the system. The application does not directly...

Security Bulletin: Samba as used in IBM QRadar SIEM is vulnerable to multiple CVE's. (CVE-2016-2110, CVE-2016-2112, CVE-2016-2115)

Summary Samba is susceptible to multiple vulnerabilities as used in IBM QRadar SIEM. Vulnerability Details CVE-ID: CVE-2016-2110 Description: Samba could allow a remote attacker to bypass security restrictions, caused by the failure to protect the feature negotiation of NTLMSSP from a downgrade. ...

Security Bulletin: IBM Tealeaf Customer Experience installers vulnerable to attack (CVE-2016-2542)

Summary Installation programs for the Microsoft Windows components of IBM Tealeaf Customer Experience are vulnerable to attack under certain conditions. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTION: Flexera InstallShield could allow a remote attacker to execute arbitrary code on the...

Microsoft Windows: Require domain users to elevate when setting a networks location

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncstddomainusersetlocation.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require domain users to elevate when setting a networks location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enable insecure guest logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MS Security Guide: Configure SMB v1 client driver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsgsmbv1clientdriver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure SMB v1 client driver Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MS Security Guide: Enable Structured Exception Handling Overwrite Protection

If this setting is enabled, SEHOP is enforced. If this setting is disabled or not configured, SEHOP is not enforced for 32-bit processes. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Metateta - Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit

Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit For faster pen testing for large networks What You Can Do Scanning with all metasploit modules for specific network Protocol like smb,smtp,snmp Run all Auxiliary modules against specific network Protocol Run al...

Microsoft Windows: Service: Simple TCP/IP Services

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsimpletcpipservices.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Simple TCP/IP Services simptcp Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Service: Server

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlanmanserver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Server LanmanServer Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Microsoft Windows: Service: HomeGroup Listener

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhomegroupprovider.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for HomeGroup Provider HomeGroupProvider Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Windows: Service: HomeGroup Listener

This test checks the setting for policy scriptaddpreferencename:"Value", type:"radio", value:"4;0;1;2;3"; OpenVAS Vulnerability Test $Id: winhomegrouplistener.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for HomeGroup Listener HomeGroupListener Authors: Emanuel Moss Copyright: Copyright c...

Microsoft Windows 10: Service: Downloaded Maps Manager

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windownloadedmapsmanager.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Downloaded Maps Manager MapsBroker Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Service: IIS Admin Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winiisadminservice.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for IIS Admin Service IISADMIN Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Service: Remote Registry

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremoteregistry.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Remote Registry RemoteRegistry Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

App Layering: How to force the ELM to use a specific SMB version for file servers

In the ELM, when connecting to a file share, we test all the SMB versions that we support, from top to bottom, until we get a successful login. We specifically try 3.02, 3.0, 2.1, 2.0 and 1.0, in that order, before giving up. An SMB server is supposed to return "Not Supported" when an attempt is...

Microsoft Windows: Network access: Remotely accessible registry paths

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaremoteaccessregpaths.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Network access: Remotely accessible registry paths Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...