Shadow CVE-2019-19882 Multiple Local Privilege Escalation Vulnerabilities

Description Shadow is prone to multiple local privilege-escalation vulnerabilities. A local attacker can exploit these issues to gain elevated privileges. Shadow 4.8 is vulnerable; other versions may also be affected. Technologies Affected Shadow-Maint Shadow 4.8 Recommendations Permit local acce...

OS Identification and Installed Software Enumeration over SSH v2 (Using New SSH Library)

Nessus was able to login to the remote host using SSH or local commands and extract the list of installed packages. TRUSTED...

Host Asset Information

Nessus collected information about the target host including: - network interfaces including IP addresses, MAC addresses, FQDNs - inventory of installed software - information about users and user groups This data has been stored in the Nessus report database. Note that this plugin will not produ...

OEM Bloatware Security Vulnerabilities Found

Last year’s Superfish and eDellRoot bloatware mishaps exposed the security nightmare that pre-installed software updaters can create on new laptops. And while these two high-profile incidents made the issue public, they’re hardly isolated cases. Many popular consumer and business laptops from...

Samsung mobile remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Summary A remote attacker to completely have the ability to control user web traffic, the manipulation Samsung phone keyboard update mechanism, and on the target phone using the system user permission to execute code. On Samsung devices pre-installed quick keyboard cannot be disabled also cannot ...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

Debian Security Advisory DSA 2896-1 (openssl - security update)

A vulnerability has been discovered in OpenSSL OpenVAS Vulnerability Test $Id: deb2896.nasl 9136 2018-03-19 13:08:02Z cfischer $ Auto-generated from advisory DSA 2896-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...

HP Unified Functional Testing Detection

Binary data hpunifiedfunctionaltestinginstalled.nbin...

Oracle Installed Software Enumeration (Linux / Unix)

Binary data oracleenumproductsnix.nbin...

Oracle Installed Software Enumeration (Windows)

Binary data oracleenumproductswin.nbin...

Mozilla Updater does not lock MAR file after signature verification — Mozilla

Security researcher Seb Patane reported that the Mozilla Updater does not write-lock the MAR update file when it is in use by the Updater. This leaves open the possibility of altering the contents of the MAR file after the signature on the file has been verified as valid but before it has been...

WinSCP Detection (Windows SMB Login)

SMB login-based detection of WinSCP. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

Foxit Advanced PDF Editor Detection (Windows SMB Login)

Detects the installed version of Foxit Advanced PDF Editor. The script logs in via smb, searches for Foxit Advanced PDF Editor in the registry and gets the version from registry SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Symantec Backup Exec Version Detection

Detects the installed version of Symantec Backup Exec on Windows. The script logs in via smb, searches for Symantec Backup Exec and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Nmap NSE net: snmp-win32-software

Attempts to enumerate installed software through SNMP. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpwin32softwarenet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Information disclosure

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

snmp-win32-software NSE Script

Attempts to enumerate installed software through SNMP. Script Arguments snmp.version See the documentation for the snmp library. creds.service, creds.global See the documentation for the creds library. Example Usage nmap -sU -p 161 --script=snmp-win32-software Script Output | snmp-win32-software:...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:339)

Security issues were identified and fixed in firefox 3.0.x : Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and...

Integrity Clientless Security (ICS) Update 3.7.252.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...