Check_MK Agent Detection

CheckMK agent, an IT monitoring service, is running on the remote host. CheckMK allows clients to retrieve large amounts of data about the target. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59837; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22";...

GLSA-201206-11 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-11 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities allow for arbitrary file retrieval,...

方正教务系统sql注射

简要描述： 你还再为考试挂科而烦恼么，你还再为大学里怎么要妹子电话而纠结么，你想快速找到学校里的漂亮妹子么，那么请看下文 详细说明： 1. 教室查询处有sql注射，如图 1 union select NULL,owner from alltables 爆出数据库 2. 找回密码存在sql注射 验证方式为本地javascript验证，服务端未做验证，可爆出第一个用户（管理员密码） 首先通过sql注射查处老师登录帐号密码（顺便吐槽下，这代码命名也不规范，表，字段名字尽是xyz,xsz之类的，密码加密也是用的可逆的方式，而且还是自己写的加密算法，或者那个不能叫做加密算法，就是简单的字符串变换）...

Ruubikcms 1.1.x - Cross-Site Scripting Information Disclosure Directory Traversal

Ruubikcms 1.1.x - Cross-Site Scripting Information Disclosure Directory Traversal source: https://www.securityfocus.com/bid/53655/info RuubikCMS is prone to multiple cross-site-scripting vulnerabilities, multiple information-disclosure vulnerabilities, and directory-traversal vulnerability...

Ruubikcms 1.1.x - Cross-Site Scripting / Information Disclosure / Directory Traversal

source: https://www.securityfocus.com/bid/53655/info RuubikCMS is prone to multiple cross-site-scripting vulnerabilities, multiple information-disclosure vulnerabilities, and directory-traversal vulnerability. Attackers may leverage these issues to steal cookie-based authentication credentials, t...

Artiphp CMS 5.5.0 database backup disclosure Exploit-vulnerability warning-the black bar safety net

? php / Artiphp CMS 5.5.0 Database Backup Disclosure Exploit Author: Artiphp www.2cto.com http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Description: Artiphp stores database backups using...

http-vuln-cve2012-1823 NSE Script

Detects PHP-CGI installations that are vulnerable to CVE-2012-1823, This critical vulnerability allows attackers to retrieve source code and execute code remotely. The script works by appending "?-s" to the uri to make vulnerable php-cgi handlers return colour syntax highlighted source. We use th...

RealNetworks Helix Server Multiple Remote Vulnerabilities

RealNetworks Helix Server is prone to multiple remote vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

http-icloud-findmyiphone NSE Script

Retrieves the locations of all "Find my iPhone" enabled iOS devices by querying the MobileMe web service authentication required. Script Arguments http-icloud-findmyiphone.username the Apple Id username http-icloud-findmyiphone.password the Apple Id password slaxml.debug See the documentation for...

Ubuntu Update for puppet USN-1419-1

Ubuntu Update for Linux kernel vulnerabilities USN-1419-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14191.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for puppet USN-1419-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 : puppet vulnerabilities (USN-1419-1)

It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. CVE-2012-1906 It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this t...

Intuit Help System Protocol File Retrieval

Intuit Help System Protocol File Retrieval Derek Soeder [email protected] Reported to [email protected] on March 15, 2012; vendor did not respond. Reported to CERT on March 22, 2012; vendor did not respond. Responsible disclosure failed with error code 10060. Published: March 30, 2012 AFFECT...

Intuit Help System Protocol File Retrieval

Intuit Help System Protocol File Retrieval Derek Soeder [email protected] Reported to [email protected] on March 15, 2012; vendor did not respond. Reported to CERT on March 22, 2012; vendor did not respond. Responsible disclosure failed with error code 10060. Published: March 30, 2012 AFFECT...

Bitsmith PS Knowbase 3.2.3 - Buffer Overflow Vulnerability

Document Title: =============== Bitsmith PS Knowbase 3.2.3 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=474 Release Date: ============= 2012-03-29 Vulnerability Laboratory ID VL-ID: ====================================...

stun-info NSE Script

Retrieves the external IP address of a NAT:ed host using the STUN protocol. Script Arguments stun.mode See the documentation for the stun library. Example Usage nmap -sV -PN -sU -p 3478 --script stun-info Script Output PORT STATE SERVICE 3478/udp open|filtered stun | stun-info: | External IP:...

Sockso Music Host Server 1.5 Directory Traversal

This module exploits a directory traversal bug in Sockso on port 4444. This is done by using "../" in the path to retrieve a file on a vulnerable machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

NetDecision NOCVision Server Directory Traversal

This module exploits a directory traversal bug in NetDecision's TrafficGrapherServer.exe service. This is done by using "..." in the path to retrieve a file on a vulnerable machine. This module requires Metasploit: https://metasploit.com/download Current source:...

Siemens WinCC Multiple Vulnerabilities

Overview Independent researchers Gleb Gritsai, Alexander Zaitsev, Sergey Scherbel, Yuri Goltsev, Dmitry Serebryannikov, Sergey Bobrov, Denis Baranov, Andrey Medov from Positive Technologies have identified multiple vulnerabilities in the Siemens WinCC application. In evaluating these reported...

ndmp-version NSE Script

Retrieves version information from the remote Network Data Management Protocol ndmp service. NDMP is a protocol intended to transport data between a NAS device and the backup device, removing the need for the data to pass through the backup server. The following products are known to support the...