219 matches found
4553 Parasite Mothership Detect
The backdoor SPDX-FileCopyrightText: 2002 Violating Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11187";...
remote command execution in inserter.cgi script
Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN inserter.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...
HP-UX Security patch : PHSS_24497
The remote host is missing HP-UX Security Patch number PHSS24497 . Security Vulnerability in ecsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16688; scriptversion"1.6";...
GLSA-200501-45 : Gallery: XSS vulnerability
The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...
Chipmunk Forum Multiple SQL Injections
The remote host is running Chipmunk, a web-based forum written in PHP. The remote version of this software is affected by several SQL injection vulnerabilities that may allow an attacker to execute arbitrary SQL statements on the remote SQL database. %NASLMINLEVEL 70300 C Tenable Network Security...
PhpDig < 1.8.5 Unspecified Vulnerability
The remote host is running phpDig, an open source search engine written in PHP. The remote version of this software is affected by a vulnerability that may allow an attacker to tamper with the integrity of the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
GLSA-200411-24 : BNC: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-24 BNC: Buffer overflow vulnerability Leon Juranic discovered that BNC fails to do proper bounds checking when checking server response. Impact : An attacker could exploit this to cause a Denial of Service and potentially...
Solaris 2.5.1 (x86) : 104969-02
SunOS 5.5.1x86: chkey and newkey patch. Date this patch was last updated by Sun : Jan/21/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Mac OS X Multiple Vulnerabilities (Security Update 2004-05-03)
The remote host is missing Security Update 2004-05-03. This security update includes updates for AFP Server, CoreFoundation, and IPSec. It also includes Security Update 2004-04-05, which includes updates for CUPS, libxml2, Mail, and OpenSSL. For Mac OS X 10.2.8, it also includes updates for Apach...
Oracle 9iAS iSQLplus XSS
The remote host is running a version of the Oracle9i 'isqlplus' CGI that is vulnerable to a cross-site scripting attack. An attacker may exploit this flaw to steal the cookies of legitimate users on the remote host. %NASLMINLEVEL 70300 This script was written by Frank Berger This vulnerability wa...
php.ini PHP protection bypass
It's possible tyo bypass protection registerglobals = on for example of virtual host by requestin host without protection in same HTTP keep-alive connection before...
MyDoom Virus Backdoor Detection
The MyDoom backdoor is listening on this port. An attacker may connect to it to retrieve sensitive information, e.g. passwords or credit card numbers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. rev 1.7: fixes a bug introduced in rev 1.6 spotted by Phil Bordelon rev 1.6: MyDoom.B detecti...
MS03-039 Exploitation Backdoor Account Detection
It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...
ST FTP Service Arbitrary File/Directory Access
The remote FTP server is vulnerable to a flaw that allows users to access files that are outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : CWD C: TRUSTED...
Webalizer < 2.01-09 Multiple XSS
Webalizer, a web server log analysis application, was detected on the remote host. This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports. %NASLMINLEVEL 70300 This script was written by Georges Dagousset See t...
CVE-2001-1385
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts...
CGIForum cgiforum.pl thesection Parameter Traversal Arbitrary File Access
The 'cgiforum.pl' CGI is installed. This CGI has a well known security flaw that could let a remote attacker read arbitrary files on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10552;...
Microsoft Windows SMB Registry : SFCDisable Key Permission Weakness
The registry key HKLM\SOFTWARE\Microsoft\Windows NT\WinLogon\SFCDisable has its value set to a value other than 0 or 4. Any value other than 0 or 4 disables the Windows File Protection, which allows any user on the remote host to view / modify any file he wants. This probably means that this host...
Multiple Vendor phf CGI Arbitrary Command Execution
The 'phf' CGI is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...