Linux/Cdorked.A Backdoor

Binary data cdorkedremote.nbin...

Mozilla Thunderbird < 12.0 Multiple Vulnerabilities

Binary data 6792.prm...

MediaWiki 1.19.x < 1.19.5 / 1.20.x < 1.20.4 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - A flaw exists because the application fails to validate input passed via Lua function names before returning it to the user. This allows a remote attacker to...

Oracle MySQL Server 5.6.x < 5.6.11 Multiple Vulnerabilities

Binary data 6768.prm...

[Vega v1.0] Web Application Security Scanner

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting XSS, inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux , OS X , and Window...

[Brakeman v1.9.5] The Static analysis security scanner for Ruby on Rails

Brakeman is an open source vulnerability scanner specifically designed for Ruby on Rails applications. It statically analyzes Rails application code to find security issues at any stage of development. Unlike many web security scanners, Brakeman looks at the source code of your application. This...

Opera < 12.15 Multiple Vulnerabilities

Binary data 800866.prm...

SuSE 11.2 Security Update : puppet (SAT Patch Number 7526)

puppet has been updated to fix 2.6.18 multiple vulnerabilities and bugs. - 19391 Find the catalog for the specified node name - Don't assume master supports SSLv2 - Don't require openssl client to return 0 on failure - Display SSL messages so we can match our regex - Don't assume puppetbindir is...

HP LaserJet Pro Printers Unauthorized Data Access

Binary data hplaserjetprodataaccess.nbin...

Debian DSA-2649-1 : lighttpd - fixed socket name in world-writable directory

Stefan Buhler discovered that the Debian specific configuration file for lighttpd webserver FastCGI PHP support used a fixed socket name in the world-writable /tmp directory. A symlink attack or a race condition could be exploited by a malicious user on the same machine to take over the PHP contr...

FreeBSD : puppet26 -- multiple vulnerabilities (04042f95-14b8-4382-a8b9-b30e365776cf)

Moses Mendoza reports : A vulnerability found in Puppet could allow an authenticated client to cause the master to execute arbitrary code while responding to a catalog request. Specifically, in order to exploit the vulnerability, the puppet master must be made to invoke the 'template' or...

Debian DSA-2643-1 : puppet - several vulnerabilities

Multiple vulnerabilities were discovered in Puppet, a centralized configuration management system. - CVE-2013-1640 An authenticated malicious client may request its catalog from the puppet master, and cause the puppet master to execute arbitrary code. The puppet master must be made to invoke the...

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 801086.prm...

Nmap NSE 6.01: mysql-info

Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...

Nmap NSE 6.01: auth-owners

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmap6authowners.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE...

Nmap NSE 6.01: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...

Nmap NSE 6.01: ftp-anon

Checks if an FTP server allows anonymous logins. If anonymous is allowed, gets a directory listing of the root directory and highlights writeable files. SYNTAX: ftp-anon.maxlist: The maximum number of files to return in the directory listing. By default it is 20, or unlimited if verbosity is...

Nmap NSE 6.01: finger

Attempts to retrieve a list of usernames using the finger service. OpenVAS Vulnerability Test $Id: gbnmap6finger.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Eddie Bell NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner...

Nmap NSE 6.01: nfs-showmount

Shows NFS exports, like the 'showmount -e' command. SYNTAX: nfs.version: number If set overrides the detected version of nfs mount.version: number If set overrides the detected version of mountd rpc.protocol: table If set overrides the preferred order in which protocols are tested. ie. 'tcp', 'ud...

Nmap NSE 6.01: daytime

Retrieves the day and time from the Daytime service. OpenVAS Vulnerability Test $Id: gbnmap6daytime.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Diman Todorov NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.org...