Folder Lock 5.9.5 Weak Password Encryption Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30766/info Folder Lock is prone to an information-disclosure vulnerability because it stores credentials in an insecure manner. A local attacker can exploit this issue to obtain passwords used by the application, which ma...

DeskSoft CheckMail 1.2 Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8449/info It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authenticatio...

DATEV Nutzungskontrolle 2.1/2.2 Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8950/info It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a local user is able...

SoftiaCom WMailserver 1.0 - Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14212/info SoftiaCom WMailserver is prone to a local information disclosure vulnerability. The application stores passwords in the windows registry. A local attacker may exploit this issue to disclose potentially sensitiv...

Microsoft SharePoint Designer Detection

Detects the installed version of Microsoft SharePoint Designer. The script logs in via smb, searches through the registry and gets the version and sets the KB. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

PrisonLocker Ransomware Emerges From Criminal Underground

Security researchers from Malware Must Die uncovered new ransomware called PrisonLocker, and said the malware author is either a legitimate security researcher or is posing as one via a personal blog and Twitter handle. Malware Must Die has monitored PrisonLocker’s development since spotting it f...

Quick Heal Anti-Virus Version Detection

Detects the installed version of Quick Heal Anti-Virus. The script logs in via smb, searches for Quick Heal in the registry and gets the version from registry. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue because of dependency on the victim's direct involvement in modifying the Windows registry to enable the attack. Note...

CVE-2013-6356

CVE-2013-6356 corresponds to Avira Secure Backup prior to patch release. Connected sources describe a buffer overflow in Avira Secure Backup v1.0.0.1 Build 3616 caused by the application loading Registry keys AutoUpdateDownloadFilename and AutoUpdateProgressFilename from HKCU\Software\Avira Secur...

Windows Manage Proxy PAC File

This module configures Internet Explorer to use a PAC proxy file. By using the LOCALPAC option, a PAC file will be created on the victim host. It's also possible to provide a remote PAC file REMOTEPAC option by providing the full URL. This module requires Metasploit: https://metasploit.com/downlo...

[OMENS v1.17] The framework for distributing Actionable Intelligence

OMENS Object Monitor for Enhanced Network Security was born out of the intrusion and intrusion attempts analysis that I have been doing over many years. I consistently run into intrusion attempts that existing IDS systems have difficulty detecting. OMENS is my attempt to better detect and...

Microsoft Windows Kernel 本地权限提升漏洞(MS13-063)

BUGTRAQ ID: 61683 CVECAN ID: CVE-2013-3197 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核中存在NTVDM子系统内存破坏条件造成的权限提升漏洞。攻击者可利用这些漏洞破坏内存，在内核模式中执行任意代码。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard...

Easy LAN Folder Share 3.2.0.100 Buffer Overflow

!/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi- Original Bug Found By: ariarat Vendor Homepage:...

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)

!/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi- Original Bug Found By: ariarat Vendor Homepage:...

Windows Live Essentials Version Detection

Detects the installed version of Windows Live Essentials on Windows. The script logs in via smb, searches for Windows Live Essentials in the registry, gets the from registry. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Authentec UPEK Protector Suite Weak Password Storage

The remote host has, or has had Authentec UPEK Protector Suite installed. Nessus was able to decrypt user credentials stored in an insecure manner in the Windows registry by UPEK Protector Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62627; scriptversion"1.7...

Virus conducting DDoS attack from infected systems

Russian anti-virus company Doctor Web is warning users about the malicious program which is helping attackers carry out mass spam mailings and allow attacker to use victim's PC as slave of his DDOS Army. According to researchers from the company they have discovered a Trojan "Trojan.Proxy.23012"...

FlashFXP Version Detection

Detects the installed version of FlashFXP. The script logs in via smb, searches for FlashFXP in the registry and gets the version from registry SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Windows Gather TortoiseSVN Saved Password Extraction

This module extracts and decrypts saved TortoiseSVN passwords. In order for decryption to be successful this module must be executed under the same privileges as the user which originally encrypted the password. This module requires Metasploit: https://metasploit.com/download Current source:...

Windows Gather Microsoft Outlook Saved Password Extraction

This module extracts and decrypts saved Microsoft Outlook versions 2002-2010 passwords from the Windows Registry for POP3/IMAP/SMTP/HTTP accounts. In order for decryption to be successful, this module must be executed under the same privileges as the user which originally encrypted the password. ...