Google Releases Skipfish Application Security Scanner

Google has released its own Web application security scanner, called Skipfish. The free scanner is designed to work within a variety of existing Web application frameworks and is built with an emphasis on speed and low false-positives, the company said. Skipfish enters a crowded field of Web...

Zeus/Zbot Banking Trojan/Data Theft (credentialed check)

The remote Windows host has files that indicate that the Zeus also known as Zbot banking trojan has been installed, or that stolen data collected by this trojan remains on the system. The Zeus trojan will intercept and log activity related to online banking, as well as other logins, such as web,...

On The Way to Better Malware Testing

Have you ever found a false positive when uploading a file to a website like VirusTotal? Sometimes it happens that not just one scanner detects the file, but several. This leads to an absurd situation where every product which doesn’t detect this file automatically looks bad to users who don’t...

Backported Security Patch Detection (WWW)

Security patches may have been 'backported' to the remote HTTP server without changing its version number. Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. C Tenable Network Security, Inc...

Backported Security Patch Detection (FTP)

Security patches may have been 'backported' to the remote FTP server without changing its version number. Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. C Tenable Network Security, Inc...

Debian Security Advisory DSA 010-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 010-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nessus Windows Scan Not Performed with Admin Privileges

The Nessus scanner testing the remote host has been given SMB credentials to log into the remote host, however these credentials do not have administrative privileges. Typically, when Nessus performs a patch audit, it logs into the remote host and reads the version of the DLLs on the remote host ...

Several GET locks web server

The remote web server shuts down temporarily or blacklists us when it receives several GET HTTP/1.0 requests in a row. This might trigger false positive in generic destructive or DoS plugins. The scanner enabled some countermeasures, however they might be insufficient. SPDX-FileCopyrightText: 200...

Section network viagra intrusion detection system technology think-vulnerability warning-the black bar safety net

With the rapid development of Internet, the network security more and more by governments, businesses, and even personal attention. In the past, prevent network attacks the most common method is the firewall. However, relying solely on a firewall does not guarantee sufficient security, if the...

Web Application Default Username ('super'/'1502') / Password ('super'/'1502') - deprecated

This plugin has been deprecated due to age and the likelihood of false positives. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/10/26. Deprecated Due to Age and likelihood of false positives. include"compat.inc"; if description scriptid12203; scriptversion"1.26";...

Avirt Multiple Product HTTP Proxy Overflow (deprecated)

This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...

Virus Infection Detection (deprecated)

This script checks for the presence of different viruses on the remote host, by using the SMB credentials that you provide to Nessus. - W32/Badtrans-B - JSGIGGER.A@mm - W32/Vote-A - W32/Vote-B - CodeRed - W32.Sircam.Worm@mm - W32.HLLW.Fizzer@mm - W32.Sobig.B@mm - W32.Sobig.E@mm - W32.Sobig.F@mm -...

Alcatel OmniSwitch 7700/7800 Switches Backdoor Access (deprecated)

This plugin has been deprecated due to excessive false positives since it flags any telnet banner discovered on TCP 6778. %NASLMINLEVEL 999999 This script was written by deepquest See the Nessus Scripts License for details Modifications by rd: - added ref:...

Nimda Worm Infected HTML File Detection

The remote web server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. Visitors to such a compromised web server may be prompted to download an .eml Outlook Express email file, which contains the worm as an...

LDAP NULL BASE Search Access

The remote LDAP server supports search requests with a NULL, or empty, base object. This allows information to be retrieved without any prior knowledge of the directory structure. Coupled with a NULL BIND, an anonymous user may be able to query your LDAP server using a tool such as 'LdapMiner'...