LiteSpeed web server crossite scripting

Crossite scripting in administration scripts...

Checkpoint Firewall open Web administration

The remote Checkpoint Firewall is open to Web administration. An attacker use it to launch a brute force password attack against the firewall, and eventually take control of it. OpenVAS Vulnerability Test $Id: checkpointopenwebadmin.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Checkpoint...

Linksys Router Default Password (HTTP)

This Linksys Router has the default password set for the web administration console. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Quicktime/Darwin 4.1.x Streaming Administration Server 'parse_xml.cgi' Multiple Vulnerabilities

QuickTime/Darwin streaming administration server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

LinuxConf Detection (HTTP)

Linuxconf is running Linuxconf is a sophisticated administration tool for Linux and is granting network access at least to the host that the scanner is running on. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Checkpoint Firewall Open Web Administration

The remote Checkpoint Firewall is open to web administration. SPDX-FileCopyrightText: 2005 Matthew North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Detect SWAT server port

SWAT Samba Web Administration Tool is running on this port. SWAT allows Samba users to change their passwords, and offers to the sysadmin an easy-to-use GUI to configure Samba. However, it is not recommended to let SWAT be accessed by the world, as it allows an intruder to attempt to brute force...

Linksys Router Default Password

This Linksys Router has the default password set for the web administration console. This console provides read/write access to the router's configuration. An attacker could take advantage of this to reconfigure the router and possibly re-route traffic. OpenVAS Vulnerability Test $Id:...

Linksys Gozila CGI DoS Vulnerability

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Linksys Gozila CGI denial of service

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. OpenVAS Vulnerability Test $Id: linksysgozilacgiDoS.nasl 6702 2017-07-12 13:49:41Z cfischer $ Description: Linksys Gozila CGI denial of service Authors:...

Cold Fusion Administration Page Overflow

A denial of service vulnerability exists within the Allaire ColdFusion web application server version 4.5.1 and earlier which allows an attacker to overwhelm the web server and deny legitimate web page requests. By downloading and altering the login HTML form an attacker can send overly large...

NetOp products TCP detection

This script detects if the remote system has a Danware NetOp program enabled and running on TCP. These programs are used for remote system administration, for telecommuting and for live online training and usually allow authenticated users to access the local system remotely. Specific information...

Oracle Web Administration Server Detection

We detected the remote web server as an Oracle Administration web server. This web server enables attackers to configure your Oracle Database server if they gain access to a valid authentication username and password. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpt...

Danware NetOp Products Detection (TCP)

This script detects if the remote system has a Danware NetOp program enabled and running on TCP. These programs are used for remote system administration, for telecommuting and for live online training and usually allow authenticated users to access the local system remotely. Specific information...

SiteScope Web Administration Server Detection (HTTP)

HTTP based detection of the SiteScope Web Administration Server. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cobalt Web Administration Server Detection (HTTP)

The remote web server is the Cobalt Administration web server. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Danware NetOp Products Detection (UDP)

This script detects if the remote system has a Danware NetOp program enabled and running on UDP. These programs are used for remote system administration, for telecommuting and for live online training and usually allow authenticated users to access the local system remotely. Specific information...

CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...

aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities

aRCHILLES Newsworld 1.5.0-rc1 Multiple Vulnerabilities Software: aRCHILLES Newsworld Vulnerable versions: = 1.5.0-rc1 Type: Information Disclosure, Login Bypass Risk: Critical Date: 21st October 2005 Vendor: aRCHILLES http://www.scriptworld.kh-webcenter.de Credit: ======= These vulnerabilities we...

CVE-2005-3269

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...