9568 matches found
phpBB Cash_Mod admin_cash.php Arbitrary Command Execution
It is possible to make the remote host include PHP files hosted on a third-party server using the phpBB CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...
TeeKai Tracking Online XSS
The remote host runs Teekai Tracking Online, a PHP script used for tracking the number of users on a Web site. This version is vulnerable to cross-site scripting attacks. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution ...
PHP < 3.0 mylog.html/mlog.html Arbitrary File Access
The remote host is running PHP/FI. The remote version of this software contains a flaw in the files mylog.html/mlog.html that can allow a remote attacker to view arbitrary files on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Check Point InterSpect Detection
The remote host seems to be running Check Point InterSpect, an internet security gateway. The Nessus host is likely to have been put in quarantine, its activity will be dropped for 30 minutes by default. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15614;...
[GLSA-200411-01] ppp: Remote denial of service vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-01 ppp: Remote denial of service vulnerability The pppd server improperly verifies header fields, making it vulnerable to denial of service attacks. Impact An attacker can cause the pppd server to access memory that it isn'...
GLSA-200410-31 : Archive::Zip: Virus detection evasion
The remote host is affected by the vulnerability described in GLSA-200410-31 Archive::Zip: Virus detection evasion Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the glob...
Web Server SSL Port HTTP Traffic Detection
Nessus has discovered that it is talking in plain HTTP on an SSL port. Nessus has corrected this issue by enabling HTTPS for this port only. However, if other SSL ports are used on the remote host, they might be skipped. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
solaris/SPARC connect-back 204 bytes
solaris/SPARC connect-back 204 bytes. Shellcode exploit for solarissparc platform / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x2, %o0 ! o0 = AFINET mov 0x2, %o1 ! o1 = SOCKSTREAM xor %o2, %o2, %o2 ! o2 = 0 mov 0xe...
solaris/SPARC connect-back 204 bytes
Exploit for solaris/sparc platform in category shellcode ==================================== solaris/SPARC connect-back 204 bytes ==================================== / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x...
Canon ImageRUNNER SMTP Arbitrary Content Printing
The remote host seems to be a Canon ImageRUNNER printer, which runs a SMTP service. It is possible to send an email to the SMTP service and have it printed out. An attacker may use this flaw to send an endless stream of emails to the remote device and cause a denial of service by using all of the...
Xedus Detection
The remote host runs Xedus Peer-to-Peer web server. It provides the ability to share files, music, and any other media, as well as create robust and dynamic websites, which can feature database access and file system access, with full .NET support. C Tenable Network Security, Inc...
GLSA-200408-02 : Courier: XSS vulnerability in SqWebMail
The remote host is affected by the vulnerability described in GLSA-200408-02 Courier: XSS vulnerability in SqWebMail Luca Legato found that SqWebMail is vulnerable to a cross-site scripting XSS attack. An XSS attack allows an attacker to insert malicious code into a web-based application. SqWebMa...
GLSA-200407-06 : libpng: Buffer overflow on row buffers
The remote host is affected by the vulnerability described in GLSA-200407-06 libpng: Buffer overflow on row buffers Due to a wrong calculation of loop offset values, libpng contains a buffer overflow vulnerability on the row buffers. This vulnerability was initially patched in January 2003 but...
GLSA-200401-02 : Honeyd remote detection vulnerability via a probe packet
The remote host is affected by the vulnerability described in GLSA-200401-02 Honeyd remote detection vulnerability via a probe packet A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP...
GLSA-200408-21 : Cacti: SQL injection vulnerability
The remote host is affected by the vulnerability described in GLSA-200408-21 Cacti: SQL injection vulnerability Cacti is vulnerable to a SQL injection attack where an attacker may inject SQL into the Username field. Impact : An attacker could compromise the Cacti service and potentially execute...
SNMP Trap Agent on Remote Host
Binary data 1429.prm...
SNMP Agent on Remote Host
Binary data 1426.prm...
SNMP Trap Agent on Remote Host
Binary data 1428.prm...