Nmap NSE: MySQL Info

This script attempts to connect to a MySQL server and extract information. This is a wrapper on the Nmap Security Scanner's http://nmap.org mysql-info.nse OpenVAS Vulnerability Test $Id: gbnmapmysqlinfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap MySQL Info NSE script. Authors:...

Nmap NSE: SMB Enum Users

This script attempts to enumerate the users on a remote Windows system, with as much information as possible. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-users.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumusers.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for...

Nmap NSE: SMB Enum Sessions

This script attempts to enumerate the users logged into a system either locally or through an SMB share. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-sessions.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumsessions.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper fo...

Nmap NSE: SMBV2 Enabled

This script attempts to check whether a server is running the SMBv2 protocol or not. This is a wrapper on the Nmap Security Scanner's http://nmap.org smbv2-enabled.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbv2enabled.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMBV2 Enabled NSE...

Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution

Binary data 5661.prm...

Nmap NSE: SMB Brute

This script attempts to get SMB login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-brute.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Brute NSE script...

Nmap NSE: SMB System Info

This script attempts to get the information about the remote system from the registry. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-system-info.nse OpenVAS Vulnerability Test $Id: gbnmapsmbsysteminfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB System Info...

Horde Application Framework 'icon_browser.php' Cross-Site Scripting Vulnerability

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacke...

Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager - Cisco Systems

Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features: - Session Initiation Protocol SIP - Media Gateway Control Protocol MGCP -...

Nmap NSE: FTP Bounce

This script attempts to check if the FTP server allows port scanning using the FTP bounce method. This is a wrapper on the Nmap Security Scanner's http://nmap.org ftp-bounce.nse OpenVAS Vulnerability Test $Id: gbnmapftpbounce.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap FTP Bounce NSE...

CGI Generic HTML Injections (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML to be executed in a user's browser within the security context of the affected site. The remote web server...

IOS Reload after Scanning Vulnerability - Cisco Systems

Security Scanning software can cause a memory error in Cisco IOS Software that will cause a reload to occur. This vulnerability affects only Cisco IOS software version 12.12T and 12.13T, and limited deployment releases based on those versions. Customers using the affected Cisco IOS software...

Crafted IP Option Vulnerability

Cisco routers and switches running Cisco IOS or Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processi...

Nmap NSE: FTP Brute

This script attempts to get FTP login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org ftp-brute.nse OpenVAS Vulnerability Test $Id: gbnmapftpbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap FTP Brute NSE script...

Squid 3.1.6 DNS Reply Denial of Service

According to its banner, the version of the Squid proxy caching server installed on the remote host is 3.1.6. This version is affected by a denial of service vulnerability that is caused by an assertion failure when contacting IPv4-only DNS resolvers. Note that Nessus has relied only on the versi...

Debian DSA-2093-1 : ghostscript - several vulnerabilities

Two security issues have been discovered in Ghostscript, the GPL PostScript/PDF interpreter. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4897 A buffer overflow was discovered that allows remote attackers to execute arbitrary code or cause a deni...

Nmap NSE: SMB OS Discovery

This script attempts to determine the operating system, computer name, domain, and current time over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-os-discovery.nse OpenVAS Vulnerability Test $Id: gbnmapsmbosdiscovery.nasl 7006 2017-08-25 11:51:20Z teissa $...

Nmap NSE: Banner Grabber

This script attempts to connect to the target port and returns the banner of the remote service. This is a wrapper on the Nmap Security Scanner's http://nmap.org banner.nse OpenVAS Vulnerability Test $Id: gbnmapbannergrabber.nasl 8233 2017-12-22 09:37:31Z cfischer $ Wrapper for Nmap Banner Grabbe...

FreeBSD : Piwik -- Local File Inclusion Vulnerability (26e1c48a-9fa7-11df-81b5-00e0814cab4e)

Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...

Debian DSA-2079-1 : mapserver - several vulnerabilities

Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2539 A stack-based buffer overflow in the msTmpFile...