Wollf backdoor detection

This host appears to be running Wollf on this port. Wollf Can be used as a Backdoor which allows an intruder gain remote access to files on your computer. If you did not install this program for remote management then this host may be compromised. SPDX-FileCopyrightText: 2003 J.Mlodzianowski Some...

4553 Parasite Mothership Detect

The backdoor SPDX-FileCopyrightText: 2002 Violating Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11187";...

Port TCP:0 Open

TCP port 0 is open on the remote host. This is highly suspicious as this TCP port is reserved and should not be used. This might be a backdoor REx. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Alcatel OmniSwitch 7700/7800 switches backdoor

The remote host seems to be a backdoored Alcatel OmniSwitch 7700/7800. SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Korgo worm detection

The remote host is probably infected with Korgo worm. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 and opens a backdoor on TCP ports 113 and 3067. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might b...

Bugbear worm

BugBear backdoor is listening on this port. A cracker may connect to it to retrieve secret information, e.g. passwords or credit card numbers... The BugBear worm includes a key logger and can kill antivirus or personal firewall softwares. It propagates itself through email and open Windows shares...

WinSATAN

WinSATAN is installed. This backdoor allows anyone to partially take control of the remote system. An attacker may use it to steal your password or prevent your system from working properly. OpenVAS Vulnerability Test $Id: winsatan.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: WinSATAN...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. Multiple security vulnerabilities have been found, one of them is a backdoor password 'jstwo' allowing complete access to the system. OpenVAS...

URCS Server Detection

This host appears to be running URCS Server. Unmanarc Remote Control Server can be used/installed silent as a SPDX-FileCopyrightText: 2005 J.Mlodzianowski Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. SPDX-FileCopyrightText: 2002 Jason Lidow Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dabber Worm Detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

Bugbear worm

BugBear backdoor is listening on this port. SPDX-FileCopyrightText: 2005 Michel Arboi & Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dvbbs7. 1 still from the back office to get webshell-vulnerability warning-the black bar safety net

Article author: love sad Information source: evil octal security team Background: dvbbs7. 1 in the background backup inside plus a access database check out. So the original gif image is restored into the backdoor has to die Solution: I put the asp Trojan is inserted into the database, and then...

Mad virus mad firewall—emerging-Trojan NameLess BackDoor Vengeance in mind(figure)-vulnerability warning-the black bar safety net

Editor's note: mention of the NameLess Latest 1. 4 version of the source code of the site there is a download NameLess Virus is a new Xing of DLL-Trojans, this Trojan was born not long, but is definitely a horse of great potential of a thousand miles Colt is. Speaking of the NameLess Trojan...

Build your own Webshell black box-vulnerability warning-the black bar safety net

Build your own Webshell black box! Playedsql injection,storm Gallery,using too small ficus WIS+WED,NBSI automatic injection tool. And so on. Through a variety of scripts to attack the party,everyone scored quite a few websites, Upload a various types of web Trojan?...

Planet switches backdor account

There is undocumented 'admin' account with 'ISPMODE' password...

Planet Technology Corp FGSW2402RS switch default password / "backdoor"

Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...

planetBackdoor.txt

Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...