F5 Networks BIG-IP : glibc vulnerability (K23946311)

The strftime function in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly obtain sensitive information via an out-of-range time value. CVE-2015-8776 C Tenable Network Security, Inc. The descriptive text...

SphereFTP Server Remote Detection

Detects the installed version of SphereFTP Server. The script sends a connection request to the server and attempts to extract the version from the reply SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IBM WebSphere Application Server Liberty Arbitrary Code Execution Vulnerability (Mar 2016)

IBM WebSphere Application Server Liberty is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Unified Communications Manager Information Disclosure Vulnerability (cisco-sa-20160208-ucm)

Cisco Unified Communications Manager CUCM is prone to an information disclosure vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

Cisco Unified IP Phone Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

o2 DSL Auto Configuration Server Credential Disclosure

Advisory: o2/Telefonica Germany: ACS Discloses VoIP/SIP Credentials The o2 Auto Configuration Server ACS discloses VoIP/SIP credentials of arbitrary customers when receiving manipulated CWMP packets. These credentials can then be used by an attacker to register any VoIP number of the victim. This...

Google Picasa Detection (Mac OS X SSH Login)

Detection of installed version of Google Picasa. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Cisco Mobility Service Engine Web Interface Detection

This script performs HTTPs based detection of Cisco Mobility Service Engine SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

华为CPE设备远程任意文件读取漏洞

向互联网开放网络端口（TCP / 37215，测试设备）的华为CPE模块存在目录遍历漏洞，37215端口是华为CPE设备的UPnP服务端口。 通过利用这一漏洞，远程攻击者可以不经验证访问设备的任何本地文件，黑客可以通过这一漏洞控制存在漏洞的设备。 详细来说，Web服务器被设计为无需身份验证就可以远程访问/icon/文件夹，然而这里提供的路径并不会检查目录遍历的尝试，导致攻击者可以用 ../ 访问任何本地文件。 举个栗子：设备的/etc/inittab文件可以通过以下网址访问到： http://:37215/icon/../../../etc/inittab 是存在漏洞设备的IP地址...

Huawei CPE devices there is a remote arbitrary file reading vulnerability reference EXP-a vulnerability warning-the black bar safety net

The CPE is what CPE is a high-speed 4G signal is converted into tablets, smartphones, laptops and other mobile devices universal WiFi signal of the device, can simultaneously support multi-terminal access, the size of a book, in a 4G signal coverage place, plug in the power it can use, without...

Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Reference Database Version Detection

Detects the installed version of Reference Database. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

X_CART Shopping Cart Version Detection

Detects the installed version of XCART Shopping Cart. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mango Automation Version Detection

Detects the installed version of Mango Automation. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Open-Xchange (OX) App Suite Detection (HTTP)

HTTP based detection of Open-Xchange OX App Suite. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Monsta FTP Detection (HTTP)

HTTP based detection of Monsta FTP. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806051";...

Squid HTTP Range Request Handling DoS Vulnerability (SQUID-2014:2)

Squid is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...

MS15-105: Vulnerability in Windows Hyper-V Could Allow Security Feature Bypass (3091287)

The remote Windows host is affected by a security bypass vulnerability in Windows Hyper-V due to improper application of access control list ACL configuration settings. A local attacker can exploit this, via a specially crafted application, to cause Hyper-V to allow unintended network traffic. C...

ZendServer Detection

The script sends a HTTP request to the server and attempts to extract the version from the reply. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...