6 matches found
CVE-2021-32642 Missing input validation in dynamic discovery example scripts.
radsecproxy is a generic RADIUS proxy that supports both UDP and TLS RadSec RADIUS transports. Missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Informatio...
WS-Discovery Information Discovery
Discover information from Web Services Dynamic Discovery WS-Discovery enabled systems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WS-Discovery Information Discovery', 'Description' = %q...
Use DHCP Discovery to Implement Critical Security Control #1
The number one critical security control from the Center for Internet Security recommends actively managing all hardware devices on the network: CSC 1: Inventory of Authorized and Unauthorized Devices Actively manage inventory, track, and correct all hardware devices on the network so that only...
Nmap NSE net: broadcast-wsdd-discover
Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapbroadcastwsdddiscovernet.nasl 5499...
Nmap NSE net: wsdd-discover
Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapwsdddiscovernet.nasl 5499...
wsdd-discover NSE Script
Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for t...