[Mercury v2.2.0] The Android Assessment Framework

Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication IPC endpoints exported by an application installed on a device. Mercury provides similar functionality to a number of static analysis tools, such as aapt...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

Active Perl Modules Multiple Vulnerabilities (Windows)

The host is installed with Active Perl and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbactiveperlmodulesmultvulnwin.nasl 6115 2017-05-12 09:03:25Z teissa $ Active Perl Modules Multiple Vulnerabilities Windows Authors: Arun Kallavi Copyright: Copyright c 2012 Greenbone...

Patch Management: HCL BigFix Get Installed Packages

Binary data ibmtemgetpackages.nbin...

Windows AppLocker Installed

Binary data microsoftapplockerinstalled.nbin...

qpid-cpp: qpid authentication bypass

It was found that the Apache Qpid daemon qpidd treated AMQP connections with the federationtag attribute set as a broker-to-broker connection, rather than a client-to-server connection. This resulted in the source user ID of messages not being checked. A client that can establish an AMQP connecti...

Foxit Advanced PDF Editor Detection (Windows SMB Login)

Detects the installed version of Foxit Advanced PDF Editor. The script logs in via smb, searches for Foxit Advanced PDF Editor in the registry and gets the version from registry SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Update for bacula FEDORA-2012-14452

Check for the Version of bacula OpenVAS Vulnerability Test Fedora Update for bacula FEDORA-2012-14452 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Opera Truncated Dialogs Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnmacosx.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

Javascript: URLs run in privileged context on New Tab page — Mozilla

Security researcher [email protected] reported that if a javascript: URL is selected from the list of Firefox "new tab" page, the script will inherit the privileges of the privileged "new tab" page. This allows for the execution of locally installed programs if a user can be convinced to save a...

Adobe Premiere Pro Installed

Adobe Premiere Pro, a video editing application, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62690; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Adobe Premiere Pro...

Adobe Media Encoder Installed

Adobe Media Encoder is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62688; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Adobe Media Encoder Installed";...

Investintech SlimPDF Detection

The remote host has an install of Investintech SlimPDF reader, a light weight PDF reader. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62626; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Microsoft Expression Web Detection

Detects the installed version of Microsoft Expression Web. The script logs in via smb, searches for Microsoft Expression Web and in the registry and gets the version from SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

Symantec pcAnywhere Access Server Remote Detection

Detection of Symantec pcAnywhere Access Server. The script sends a connection request to the server and attempts to extract the response. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

sos security, bug fix, and enhancement update

2.2-29.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove RH ftp URL and support email - add...

admin/dev/shortcuts.jsp lacks an XSRF token to alter installed/.configured shortcuts

admin/dev/shortcuts.jsp does not require a csrf token to alter installed/.configured shortcuts...

How to Install, Change, or Remove the Veeam ONE License

Purpose This article documents how to manually install, change, or remove a license for Veeam ONE. Solution Install License 1. Open Veeam ONE Client. 2. Click the Main Menu ≡ in the top-left corner. 3. Click License. 4. In the dialog window that appears, click Install License. 5. Using the file...

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities A free framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. Use dynamic analysis on Android applications and devices for quicker security assessments. Share publicly known...

Linux Gather System and User Information

This module gathers system information. We collect installed packages, installed services, mount information, user list, user bash history and cron jobs This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...