openvas-scanner

OpenVAS Scanner これは Greenbone Community Edition の OpenVAS Scanner です。 これは Greenbone Enterprise アプライアンスで使用され、継続的に更新・拡張される Vulnerability Tests VTs のフィードを実行するフル機能の スキャンエンジンです。 リリース すべてのリリースファイルは Greenbone Community Feed 整合性キーで署名されています。 この gpg キーは https://www.greenbone.net/GBCommunitySigningKey.asc...

CVE-2023-50094_POC

reNgine 2.2.0 - 명령 주입 - CVE-2023-50094 설명 이 Python 스크립트는 reNgine 2.2.0에서 인증된 명령 주입 취약점을 악용합니다. 이 익스플로잇은 Scan Engine 구성의 nmapcmd 매개변수를 대상으로 하며, 공격자가 임의 명령을 실행할 수 있게 합니다. 특징 사용자 친화적인 명령줄 인터페이스CLI 기본 URL, 자격 증명 및 Scan Engine ID에 대한 유연한 입력 인증된 사용자를 위한 자동 악용 익스플로잇 세부 정보 CVE ID : TBD 영향받는 버전 : reNgine...

CVE-2025-69600

CVE-2025-69600 저자: Rafael José Núñez Gulías 회사: Iberian Var Group 영향 받는 제품: RayVentory Scan Engine 12.6 Update 8 및 이전 버전 Raynet 권고: RSEC200966 Raynet의 rvia에서 명령 삽입Command Injection 취약점으로 인해 공격자가 getconfig, upload, inventory, oracle 옵션을 통해 명령을 실행할 수 있습니다. 검증은 /opt/rvia/rvia.cfg 설정 파일에서 URL을 가져올 때만...

CVE-2026-38945

CVE-2026-38945 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 および以前のバージョン Raynet アドバイザリ: RSEC200967 rvia in Raynet executes a find command with improperly terminated search criteria to locate Java installations when the oracle option is invoked...

CVE-2025-69599

CVE-2025-69599 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet 勧告: RSEC200965 Raynet の rvia は、制御されていない検索パス要素 の問題に対して脆弱です。共有オブジェクトをロードし、システムバイナリ（.so やヘルパーバイナリなど）を呼び出す際に相対パスが使用されるため、ユーザーが PATH 環境変数の操作を通じて実行される最終的なバイナリや .so...

YARAify

YARAify YARAifyは、オープンなYARAスキャン・検索エンジンです。このリポジトリには、YARAify APIと連携するためのサンプルのPython3スクリプトがいくつか用意されています。 Auth-Keyを取得する YARA APIにクエリを実行するには、Auth-Keyを取得する必要があります。まだAuth-Keyをお持ちでない場合は、https://auth.abuse.ch/で無料で取得できます。 YARAスキャンのためにファイルを提出する このスクリプトは、スキャンエンドポイントを呼び出して、YARAifyサービスを使用してファイルをスキャンします。 python3...

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

If your scan engine already holds credentials for a host, it can ask that host which ports are open instead of probing for them. Every scan begins with the same question: which ports on this host are open? Everything after it, from identifying services to checking for vulnerabilities to evaluatin...

openvas-scanner v23.50.17

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.14

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.12

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.11

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.10

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.8

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.7

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.6

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.5

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

openvas-scanner v23.50.4

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

CVE-2026-14172

CVE-2026-14172 affects Rapid7 InsightVM, Nexpose, and the Insight Agent. The issue allows a local, low-privilege user to execute discovered executables during authenticated assessments due to lack of file ownership validation, enabling code execution as the scan credential (Scan Engine) or as roo...

CVE-2026-14172: Execution with Unnecessary Privileges

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

CVE-2025-69600: Improper Neutralization of Special Elements used in a Command

Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options...