InduSoft Web Studio Detection (Windows SMB Login)

Detects the installed version of InduSoft Web Studio. The script logs in via smb, searches for InduSoft Web Studio in the registry and gets the version from SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Netsparker Detection (Windows SMB Login)

Detects the installed version of Netsparker. The script logs in via smb, searches for SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-3773

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

Memory corruption

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2015-3773

CVE-2015-3773 : A memory-corruption vulnerability in the SMB client of Apple OS X prior to 10.10.5 may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and app crash) via unspecified vectors. Affected: OS X with SMB client; Impact: remote code exec...

CVE-2015-3773

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2015-2474

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

Memory corruption

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

CVE-2015-2474

CVE-2015-2474 affects Windows Vista SP2 and Windows Server 2008 SP2. A remote authenticated attacker can cause memory corruption by sending a crafted string to SMB server error-logging, enabling arbitrary code execution in the context of the affected service. Affected components are the SMB loggi...

CVE-2015-2474

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

MGASA-2015-0314 Updated owncloud package fixes security vulnerabilities

In ownCloud before 6.0.8 and 8.0.4, a bug in the SDK used to connect ownCloud against the Dropbox server might allow the owner of "Dropbox.com" to gain access to any files on the ownCloud server if an external Dropbox storage was mounted CVE-2015-4715. In ownCloud before 6.0.8 and 8.0.4, the...

Updated owncloud package fixes security vulnerabilities

In ownCloud before 6.0.8 and 8.0.4, a bug in the SDK used to connect ownCloud against the Dropbox server might allow the owner of "Dropbox.com" to gain access to any files on the ownCloud server if an external Dropbox storage was mounted CVE-2015-4715. In ownCloud before 6.0.8 and 8.0.4, the...

Microsoft Windows Server Message Block (SMB) Remote Code Execution Vulnerability (3073921)

This host is missing an important security update according to Microsoft Bulletin MS15-083. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-083: Vulnerability in Server Message Block could allow remote code execution: August 11, 2015

None None...

Microsoft Remote Desktop Session Host CVE-2015-2472 Spoofing Vulnerability

Description Microsoft Remote Desktop Session Host is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Technologies Affected Microsoft SQL Server 200...

MS15-083: Vulnerability in Server Message Block Could Allow Remote Code Execution (3073921)

A remote code execution vulnerability exists in Windows due to improper handling of Server Message Block SMB logging activities. An authenticated, remote attacker can exploit this vulnerability to cause a memory corruption issue, resulting in the execution of arbitrary code in the context of the...

Node.js Detection (Windows SMB Login)

SMB login-based detection of Node.js SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

io.js Detection (Windows SMB Login)

Detects the installed version of io.js. The script logs in via smb, searches for SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SMB Group Policy Preference Saved Passwords Enumeration

This module enumerates files from target domain controllers and connects to them via SMB. It then looks for Group Policy Preference XML files containing local/domain user accounts and passwords and decrypts them using Microsoft's public AES key. This module has been tested successfully on a Win2k...

Inveigh - A Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer designed to assist penetration testers that find themselves limited to a Windows system. This can commonly occur while performing phishing attacks, USB drive attacks, VLAN pivoting, or simply being restricted to a Windows system as part of client...