Web Site Crawler

Crawl a web site and store information about what was found This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Web Site Crawler', 'Description' = 'Crawl a web site and store information about what...

Ubuntu: Security Advisory (USN-1008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: integer overflow in ext4_ext_get_blocks()

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

mikmod: crash or abort when loading/playing multiple files with different number of channels

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service application...

UBUNTU-CVE-2010-3075

EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the las...

Solaris 10 (sparc) : 143645-16

SunOS 5.10: iSCSI patch. Date this patch was last updated by Sun : May/26/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/04/30. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (sparc) : 143559-10

SunOS 5.10: ssh scp patch. Date this patch was last updated by Sun : Jun/03/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Some Pushdo Variants Resuming Spam Operations

A few days after the majority of the command-and-control servers belonging to one of the variants of the Pushdo botnet were taken offline, some researchers say that there are indications that portions of the botnet are back to their old tricks, downloading new spam templates for a resumption of...

Researchers Cripple Pushdo Botnet

Researchers have made a huge dent in a major variant of the Pushdo botnet, virtually crippling the network by working with hosting providers to take down about two thirds of the command-and-control servers involved in the botnet. Pushdo for years has been one of the major producers of spam and...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

Twitter Agrees to FTC Security Audits

An important milestone that should compel all social networks to be much more diligent about preserving privacy and providing robust security was established by federal regulators with Twitter. Read the full article. The Last Watchdog...

List Users, who was since 84 days not logged in to the System.

This plugin uses ssh to List Users, who was since 84 days not logged in to the System. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0403

Directory traversal vulnerability in about.php in phpGroupWare phpgw before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the app parameter...

Flatpress 0.909.1 - Persistent Cross-Site Scripting

Flatpress 0.909.1 - Persistent Cross-Site Scripting Title: FlatPress 0.909.1 Stored XSS Vendor: http://www.flatpress.org Dork: "powered by FlatPress" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

Flatpress 0.909.1 - Persistent Cross-Site Scripting

Title: FlatPress 0.909.1 Stored XSS Vendor: http://www.flatpress.org Dork: "powered by FlatPress" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability32.htm Thanks:...

Get User without Password and User which have an PW and days since last Pasword change

This plugin uses ssh to get User without Password and User which have an PW and days since last Pasword change. If the testuser have no access to /etc/shadow an KB entry will set. OpenVAS Vulnerability Test $Id: GSHBSSHpasswords.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get User without Password...

Last Wizardz SQL Injection

Last Wizardz content.php Sql Injection Vulnerability ======================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Last Wizardz .:. Donwload Script: http://lastwiz.com/ .:...

Last Wizardz - 'id' SQL Injection

source: https://www.securityfocus.com/bid/39968/info Last Wizardz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Read the status of NTFS MAC 'Last Access Timestamp' over WMI (Windows)

Read the status of NTFS MAC 'Last Access Timestamp' over WMI Windows. OpenVAS Vulnerability Test $Id: GSHBWMILastAccessTimestamp.nasl 7061 2017-09-05 11:50:40Z teissa $ Read the status of NTFS MAC 'Last Access Timestamp' over WMI Windows Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbon...

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows Vista - Windows

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94247 Diese Prüfung bezieht sich...