8638 matches found
USN-2855-2: Samba regression
USN-2855-1 fixed vulnerabilities in Samba. The upstream fix for CVE-2015-5252 introduced a regression in certain specific environments. This update fixes the problem. Original advisory details: Thilo Uttendorfer discovered that the Samba LDAP server incorrectly handled certain packets. A remote...
Adobe Bridge CC Version Detection
Detects the installed version of Adobe bridge cc on Windows. The script logs in via smb, searches for adobe in the registry, gets the Adobe bridge cc installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...
WinREST Remote Privilege Escalation
So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...
CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections
QUESTION: CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections ANSWER: This is known limitation. We do not support unsigned SMB2 connection with windows 10 as it uses secure dialect negotiation. However performance should be better compare to w/o CB as w...
Oracle GoldenGate Version Detection
Detects the installed version of Oracle GoldenGate. The script logs in via smb, searches for Oracle GoldenGate in the registry and gets the version from SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3134226)
This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
NetworkMiner 2.0 - Network Forensic Analysis Tool (NFAT)
NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...
Kaspersky Total Security Version Detection
Detects the installed version of Kaspersky Total security on Windows. The script logs in via smb, searches for kaspersky in the registry, gets the kaspersky total security installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...
McAfee Total Protection Detection (Windows SMB Login)
Detects the installed version of McAfee Total Protection. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Windows 8 Unsupported Installation Detection
The remote host is running Microsoft Windows 8. Support for this operating system by Microsoft ended January 12th, 2016. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. Furthermore,...
三星(Samsung) SyncThruWeb 2.01.00.26 - SMB散列泄露漏洞
No description provided by source...
Solaris SMB Utilities Component Denial of Service Vulnerability
Solaris is a unix-based operating system. A security vulnerability exists in the Solaris SMB Utilities component, which allows remote attackers to exploit the vulnerability to submit a special request to launch a denial-of-service attack...
CVE-2016-0457
Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...
CVE-2016-0456
Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is...
Server side request forgery (ssrf)
Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is...
Server side request forgery (ssrf)
Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...
CVE-2016-0403
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities...
CVE-2016-0403
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities...
