华为CPE设备远程任意文件读取漏洞

向互联网开放网络端口（TCP / 37215，测试设备）的华为CPE模块存在目录遍历漏洞，37215端口是华为CPE设备的UPnP服务端口。 通过利用这一漏洞，远程攻击者可以不经验证访问设备的任何本地文件，黑客可以通过这一漏洞控制存在漏洞的设备。 详细来说，Web服务器被设计为无需身份验证就可以远程访问/icon/文件夹，然而这里提供的路径并不会检查目录遍历的尝试，导致攻击者可以用 ../ 访问任何本地文件。 举个栗子：设备的/etc/inittab文件可以通过以下网址访问到： http://:37215/icon/../../../etc/inittab 是存在漏洞设备的IP地址...

Huawei CPE devices there is a remote arbitrary file reading vulnerability reference EXP-a vulnerability warning-the black bar safety net

The CPE is what CPE is a high-speed 4G signal is converted into tablets, smartphones, laptops and other mobile devices universal WiFi signal of the device, can simultaneously support multi-terminal access, the size of a book, in a 4G signal coverage place, plug in the power it can use, without...

Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

X_CART Shopping Cart Version Detection

Detects the installed version of XCART Shopping Cart. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Reference Database Version Detection

Detects the installed version of Reference Database. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mango Automation Version Detection

Detects the installed version of Mango Automation. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Open-Xchange (OX) App Suite Detection (HTTP)

HTTP based detection of Open-Xchange OX App Suite. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Monsta FTP Detection (HTTP)

HTTP based detection of Monsta FTP. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806051";...

MS15-105: Vulnerability in Windows Hyper-V Could Allow Security Feature Bypass (3091287)

The remote Windows host is affected by a security bypass vulnerability in Windows Hyper-V due to improper application of access control list ACL configuration settings. A local attacker can exploit this, via a specially crafted application, to cause Hyper-V to allow unintended network traffic. C...

Squid HTTP Range Request Handling DoS Vulnerability (SQUID-2014:2)

Squid is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...

ZendServer Detection

The script sends a HTTP request to the server and attempts to extract the version from the reply. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

BroadWin WebAccess Version Detection

Detection of BroadWin WebAccess. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Node.js Detection (Windows SMB Login)

SMB login-based detection of Node.js SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

WideImage Version Detection

Detects the installed version of WideImage. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PivotX Multiple Vulnerabilities (Jul 2015)

PivotX is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pivotx:pivotx"; if description...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03380)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Fortinet FortiOS Detection (HTTP)

HTTP based detection of Fortinet devices running FortiOS. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wedge Networks wedgeOS Management Console Detection (HTTP)

HTTP based detection of the Wedge Networks wedgeOS Management Console. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco uBR10000 IOS Denial of Service Vulnerability

Cisco IOS on uBR10000 devices is a set of operating systems from Cisco that run in uBR10000 series routers. A denial of service vulnerability exists in the IPv6 to IPv4 subsystem of Cisco IOS version 15.3S on Cisco uBR10000 devices, which allows remote attackers to cause a denial of service via a...