Nmap NSE: DNS Zone Transfer

This script attempts to request a zone transfer AXFR from a DNS server. This is a wrapper on the Nmap Security Scanner's http://nmap.org dns-zone-transfer.nse. OpenVAS Vulnerability Test $Id: gbnmapdnszonetransfer.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap DNS Zone Transfer NSE...

Debian DSA-2136-1 : tor - buffer overflow

Willem Pinckaers discovered that Tor, a tool to enable online anonymity, does not correctly handle all data read from the network. By supplying specially crafted packets a remote attacker can cause Tor to overflow its heap, crashing the process. Arbitrary code execution has not been confirmed but...

Novell iPrint Client < 5.56 Multiple Vulnerabilities

The version of Novell iPrint Client installed on the remote host is earlier than 5.56. Such versions are reportedly affected by one or more of the following vulnerabilities that can allow for arbitrary code execution : - The iPrint ActiveX control fails to sanitize input to the 'GetDriverSettings...

Nmap NSE: WHOIS

This script queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. This is a wrapper on the Nmap Security Scanner's http://nmap.org whois.nse. OpenVAS Vulnerability Test $Id:...

Nmap NSE: Telnet Brute

This script attempts to get Telnet login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org telnet-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaptelnetbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Telnet Brute NSE...

Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities

Binary data 5730.prm...

Nmap NSE: Auth Spoof

This script attempts to checks for an identd auth server which is spoofing its replies. This is a wrapper on the Nmap Security Scanner's http://nmap.org auth-spoof.nse. OpenVAS Vulnerability Test $Id: gbnmapauthspoof.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Auth Spoof NSE script...

Nmap NSE: ASN Query

This script attempts to map IP addresses to autonomous system AS numbers. This is a wrapper on the Nmap Security Scanner's http://nmap.org asn-query.nse. OpenVAS Vulnerability Test $Id: gbnmapasnquery.nasl 7148 2017-09-15 13:01:14Z cfischer $ Wrapper for Nmap ASN Query NSE script. Authors:...

Nmap NSE: SSH Hostkey

This script attempts to get the target SSH server's key fingerprint and public key. This is a wrapper on the Nmap Security Scanner's http://nmap.org ssh-hostkey.nse OpenVAS Vulnerability Test $Id: gbnmapsshhostkey.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SSH Hostkey NSE script...

Nmap NSE: SSHv1

This script attempts to check if an SSH server supports the obsolete and less secure SSH Protocol Version 1. This is a wrapper on the Nmap Security Scanner's http://nmap.org sshv1.nse OpenVAS Vulnerability Test $Id: gbnmapsshv1.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SSHv1 NSE...

Nmap NSE: NFS Show Mount

This script attempts to show NFS exports. This is a wrapper on the Nmap Security Scanner's http://nmap.org nfs-showmount.nse OpenVAS Vulnerability Test $Id: gbnmapnfsshowmount.nasl 7148 2017-09-15 13:01:14Z cfischer $ Wrapper for Nmap NFS Show Mount NSE script. Authors: NSE-Script: Patrik Karlsso...

Debian DSA-2125-1 : openssl - buffer overflow

A flaw has been found in the OpenSSL TLS server extension code parsing which on affected servers can be exploited in a buffer overrun attack. This allows an attacker to cause an application crash or potentially to execute arbitrary code. However, not all OpenSSL based SSL/TLS servers are...

Fedora 13 : clamav-0.96.4-1300.fc13 (2010-17439)

---------------------------------------------------------------------- ---------- ChangeLog : - Sun Oct 31 2010 Enrico Scholz - 0.96.4-1300 - updated to 0.96.4 - execute 'make check' 640347 but ignore errors for now because four checks are failing on f13 - Wed Sep 29 2010 Enrico Scholz - lowered...

WonderCMS 'page' Parameter Cross Site Scripting And Information Disclosure Vulnerabilities

WonderCMS is prone to a cross-site scripting vulnerability and an information- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser...

broadcast-wsdd-discover NSE Script

Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for the...

eoCMS Local File Include Vulnerability

eoCMS is prone to multiple input-validation vulnerabilities, including: 1. An HTML-injection vulnerability 2. An SQL-injection vulnerability 3. Multiple local file-include vulnerabilities Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability &#40;CVE-2010-2750&#41;

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

MS10-077: Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841)

The JIT compiler included with the version of the .NET Framework installed on the remote host optimizes code based on an incorrect assessment. If an attacker can trick a user on the affected host into viewing a specially crafted web page using a Web browser that can run XAML Browser Applications...

Nmap NSE: POP3 Capabilities

This script attempts to retrieve POP3 email server capabilities. This is a wrapper on the Nmap Security Scanner's http://nmap.org pop3-capabilities.nse OpenVAS Vulnerability Test $Id: gbnmappop3capabilities.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap POP3 Capabilities NSE script...

Nmap NSE: SMTP Commands

This script attempts to get the commands supported by an SMTP server. This is a wrapper on the Nmap Security Scanner's http://nmap.org smtp-commands.nse OpenVAS Vulnerability Test $Id: gbnmapsmtpcommands.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMTP Commands NSE script. Authors:...