ms-sql-empty-password NSE Script

Attempts to authenticate to Microsoft SQL Servers using an empty password for the sysadmin sa account. SQL Server credentials required: No will not benefit from mssql.username & mssql.password. Run criteria: Host script: Will run if the mssql.instance-all, mssql.instance-name or mssql.instance-po...

ms-sql-xp-cmdshell NSE Script

Attempts to run a command using the command shell of Microsoft SQL Server ms-sql. SQL Server credentials required: Yes use ms-sql-brute, ms-sql-empty-password and/or mssql.username & mssql.password Run criteria: Host script: Will run if the mssql.instance-all, mssql.instance-name or...

[SECURITY] Fedora 13 Update: libnids-1.24-1.fc13

Libnids is an implementation of an E-component of Network Intrusion Detection System. It emulates the IP stack of Linux 2.x and offers IP defragmentation, TCP stream assembly and TCP port scan detection. Using libnids, one has got a convenient access to data carried by a TCP stream, no matter how...

[SECURITY] Fedora 12 Update: libnids-1.24-1.fc12

Libnids is an implementation of an E-component of Network Intrusion Detection System. It emulates the IP stack of Linux 2.x and offers IP defragmentation, TCP stream assembly and TCP port scan detection. Using libnids, one has got a convenient access to data carried by a TCP stream, no matter how...

Symantec Scan Engine Authentication Bypass (CVE-2006-0230)

Symantec Scan Engine provides virus protection services targeted at network traffic as well as data storage devices. It also provides an API in order to enable it to be integrated with third-party software and hardware devices. This product is configurable through a web interface exposed on port...

Sybase ASE Server Suspicious Command Detection

Binary data 5455.prm...

Sybase ASE Server Suspicious Command Detection

Binary data 5457.prm...

Xerox WorkCentre Authorization Bypass Vulnerabilities (XRX10-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by two authorization bypass vulnerabilities : - The web interface reportedly includes a script named 'YoUgoTIt.php' that will calculate a checksum for a specified folder name that wil...

ipidseq NSE Script

Classifies a host's IP ID sequence test for susceptibility to idle scan. Sends six probes to obtain IP IDs from the target and classifies them similarly to Nmap's method. This is useful for finding suitable zombies for Nmap's idle scan -sI as Nmap itself doesn't provide a way to scan for these...

Symantec Endpoint Protection Scan Bypass Vulnerability

The host is installed with Symantec Endpoint Protection and is possible to bypass security scan. OpenVAS Vulnerability Test $Id: secpodsymantecepointprtnsecbypassvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Symantec Endpoint Protection Scan Bypass Vulnerability Authors: Antu Sanadi Copyright:...

Symantec Endpoint Protection 11.x Scan Bypass Vulnerability

Symantec Endpoint Protection is prone to a scan bypass vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...

Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

No description provided by source. Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID:...

Rising Online Virus Scanner Active-X Denial Of Service

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Date: 17/02/2010 Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Version: 22.0.0.5 Tested on: Windows XP sp3 CVE : n/a Code : ProgID: RavOLCtlLib.RavOnline ClassID:...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow Denial of Service Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID:...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E Member: Scan File:...

Symantec Event Manipulation Potential Scan Bypass

SUMMARY On-demand scanning with Symantec AntiVirus can be bypassed by denying read access to user files. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to MR9 10.1.x Symantec AntiVirus | 10.2.x | Not Vulnerable Symantec Client Security | 3.0.x |...

Multiple Vendor Anti-Virus Magic Byte Detection Evasion

Anti-Virus AV software is meant to search for known viruses embedded in accessed or transferred files. The products are also known as virus scanners. Most virus scanners use a database of known binary patterns of viruses in order to identify trojans and other malware. The number of recognizable...

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...