Secure Elements Class 5 AVR server fails to properly validate peer certificate when downloading updates

Overview The Secure Elements Class 5 AVR server fails to properly validate the peer certificate when downloading updates. This may allow a remote attacker to distribute malicious updates to the clients. Description Class 5 AVR Secure Elements Class 5 AVR Automated Vulnerability Remediation is a...

[Full-disclosure] Socket unreachable in GNUnet rev 2780

Luigi Auriemma Application: GNUnet http://www.gnunet.org Versions: = 0.7.0d and revision 2780 Platforms: Windows, nix, BSD, Mac and more Bug: UDP socket unreachable Exploitation: remote Date: 12 May 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 Th...

acFTP FTP Server 1.4 - USER Remote Buffer Overflow (PoC)

acFTP FTP Server 1.4 - USER Remote Buffer Overflow PoC ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A"...

Mercora IMRadio Detection

Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. OpenVAS Vulnerability Test $Id: mercoraimradioinstalled.nasl...

LimeWire is installed

The remote host is using LimeWire - a p2p software, which may not be suitable for a business environment. OpenVAS Vulnerability Test $Id: limewireinstalled.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: LimeWire is installed Authors: Xue Yong Zhi Copyright: Copyright C 2003 Xue Yong Zhi Thi...

WinMX is installed

The remote host is using WinMX - a p2p software, which may not be suitable for a business environment. OpenVAS Vulnerability Test $Id: winmxinstalled.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: WinMX is installed Authors: Xue Yong Zhi Copyright: Copyright C 2003 Xue Yong Zhi This program...

Vuze Installed

Vuze formerly Azureus, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20844; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...

BitLord Detection

BitLord is installed on the remote Windows host. BitLord is a freeware peer-to-peer file sharing application that supports the BitTorrent protocol. Make sure the use of this program fits with your corporate security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

BitTorrent Installed

BitTorrent, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20843; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"BitTorrent...

Ubuntu 4.10 / 5.04 / 5.10 : ipsec-tools vulnerability (USN-221-1)

The Oulu University Secure Programming Group discovered a remote Denial of Service vulnerability in the racoon daemon. When the daemon is configured to use aggressive mode, then it did not check whether the peer sent all required payloads during the IKE negotiation phase. A malicious IPsec peer...

BitComet Client .torrent URI Handling Overflow

The version of BitComet installed on the remote Windows host has a buffer overflow flaw that could be triggered using a .torrent with a specially crafted publisher's name to crash the application or even execute arbitrary code remotely subject to the user's privileges. C Tenable Network Security...

BitComet Detection

BitComet is installed on the remote host. BitComet is a freeware peer-to-peer file sharing application for Windows. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20748; scriptversion"1.17";...

GLSA-200512-11 : CenterICQ: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200512-11 CenterICQ: Multiple vulnerabilities Gentoo developer Wernfried Haas discovered that when the 'Enable peer-to-peer communications' option is enabled, CenterICQ opens a port that insufficiently validates whatever is sent t...

CenterICQ: Multiple vulnerabilities

Background CenterICQ is a text-based instant messaging interface that supports multiple protocols. It includes the ktools library, which provides text-mode user interface controls. Description Gentoo developer Wernfried Haas discovered that when the "Enable peer-to-peer communications" option is...

CVE-2005-3694

centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service segmentation fault and crash via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus...

Direct Connect hub detection

A Direct Connect 'hub' or server is running on this port. Direct Connect is a protocol used for peer-to-peer file-sharing as well as chat, and a hub routes communications among peers. While any type of file may be shared, Direct Connect hubs often handle movies, images, music files, and games,...

Xedus directory traversal

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to directory traversal. An attacker could send specially crafted URL to view arbitrary files on the system. OpenVAS Vulnerability Test $Id: xedusdirtraversal.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Xedus...

Xedus Denial of Service

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to a denial of service. An attacker could stop the webserver accepting requests from users by establishing multiple connections from the same host. OpenVAS Vulnerability Test $Id: xedusdos.nasl 6056 2017-05-02 09:02:50Z...

YaCy Peer-To-Peer Search Engine XSS

The remote host contains a peer-to-peer search engine that is prone to cross-site scripting attacks. Description : The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due ...

Xedus directory traversal

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to directory traversal. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...