5061 matches found
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials
By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier, without credentials. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56210; scriptversion"1.5"...
Windows Gather IP Range Reverse Lookup
This module uses Railgun, calling the gethostbyaddr function to resolve a hostname to an IP...
SA500 vulnerabilities - details
Hi Advisory by Cisco was published a few days ago Bugtraq ID: 48810. Now more details: 1. Unathenticated access to web management any user - including admin. Due to blind SQLi in the login form of web management port 443, https, login field, embedded sqlite DB, there is possible to obtain: a all...
Linux 3.0 Kernel Released - Download
Linux 3.0 Kernel Released - Download A recent Google+ Post by Linus Torvalds indicates that version 3.0 of the Linux kernel will have to wait due to the discovery of a 'subtle pathname lookup bug.' Linus indicates, 'We have a patch, we understand the problem, and it looks ObviouslyCorrecttm, but ...
Nmap NSE net: smb-enum-users
Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see 'smb.lua'. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpfu...
DRIL: Domain Reverse IP Lookup Tool Download
DRIL : Domain Reverse IP Lookup Tool Download DRIL Domain Reverse IP Lookup Tool is a Reverse Domain Tool that will really useful for penetration testers to find out the domain names which are listed in the the target host, DRIL is a GUI, JAVA based application which use the Bing API key.DRIL has...
Web Site Links to Malicious Content (disabled)
This plugin has been temporarily disabled. The web site contains links that are listed as being malicious in public malware databases. Either users of the web site created the links e.g. comments added to a blog post, or the site has been compromised. Binary data urlthreatlookup.nbin...
Whatismyipaddress.com got attacked !
Whatismyipaddress.com got attacked ! A website whatismyip who gives the information about My IP IP Lookup Blacklist Check Trace Email Speed Test Hide IP Change IP got attacked last day its gives a some Sql vulnerablities which shows a vulenerable site ..!! News Source : Cyber-India...
Windows Gather Local User Account SID Lookup
This module prints information about a given SID from the perspective of this session. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Local User Account SID Lookup', 'Descriptio...
Http:BL Lookup
This module can be used to enumerate information about an IP addresses from Project HoneyPot's HTTP Block List. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "net/dns/resolver" class MetasploitModule 'Http:B...
Mandriva Update for libxt MDVA-2010:237 (libxt)
Check for the Version of libxt OpenVAS Vulnerability Test Mandriva Update for libxt MDVA-2010:237 libxt Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
PacketFence v2.0.0 - Latest Version !
"PacketFencePacketFence is an open-source network access control NAC system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless...
Mozilla dangling pointer vulnerability in LookupGetterOrSetter
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.lookupGetter function calls that lack arguments, which allows remote attackers to...
Mozilla dangling pointer vulnerability in LookupGetterOrSetter
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.lookupGetter function calls that lack arguments, which allows remote attackers to...
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:211)
Security issues were identified and fixed in mozilla-thunderbird : The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral...
Mozilla dangling pointer vulnerability in LookupGetterOrSetter
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.lookupGetter function calls that lack arguments, which allows remote attackers to...
kernel: fix LOOKUP_FOLLOW on automount "symlinks"
fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUPFOLLOW...
kernel: fix LOOKUP_FOLLOW on automount "symlinks"
fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUPFOLLOW...
nfs-ls NSE Script
Attempts to get useful information about files from NFS exports. The output is intended to resemble the output of ls. The script starts by enumerating and mounting the remote NFS exports. After that it performs an NFS GETATTR procedure call for each mounted point in order to get its ACLs. For eac...
Code injection
fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUPFOLLOW...