Malicious code in gcp-scanner-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-663 Malicious code in gcp-scanner-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CyberPanel Installed (Linux)

Binary data cyberpanelnixinstalled.nbin...

Granola Notes Detection

Binary data 701500.prm...

Granola API Web Detection

Binary data 701499.prm...

Amazon Workspaces Client Installed (Windows)

Binary data amazonworkspacesclientwininstalled.nbin...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.23 (SUSE-SU-2025:0280-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0280-1 advisory. - Update to go1.23.5 bsc1229122 - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc12360...

GO-2025-3409 Zot IdP group membership revocation ignored in zotregistry.dev/zot

Zot IdP group membership revocation ignored in zotregistry.dev/zot. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest a...

Apache MINA JAR Detection

Binary data apacheminainstalled.nbin...

Deepseek Chat Web Detection

Binary data 701498.prm...

Envoy Admin Interface Exposed

The Envoy Admin interface is an optional Envoy component that lets you view configuration and statistics, modify server behavior and filter traffic according to specific filter rules. But this unauthenticated interface can expose private information about the running service, allows modification ...

GitHub Workflow Detected

GitHub Actions are a feature from the popular GitHub platform for automating software development workflows directly within a GitHub source code repository. By defining one or more workflows files in the /.github/ directory of their repositories, developers can customize their applications build...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

Ollama < 0.4.0 Remote Code Execution

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.4.0. It is, therefore, affected by a Remote Code Execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

mySCADA PRO Manager Detection

Binary data myscadapromanagerdetect.nbin...

Ollama Multiples Vulnerabilities

According to the self-reported version in its response header, the version of Ollama hosted on the remote is, affected by a Multiples Vulnerabilities : - File existence disclosure through the api. When calling the CreateModel route with a path parameter that does not exist - A Denial Of Service...

FreeBSD : electron32 -- multiple vulnerabilities (ef303b6a-7d9e-4e28-b92e-21f39d519d9e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ef303b6a-7d9e-4e28-b92e-21f39d519d9e advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

Fedora 40 : rsync (2025-b28759cb95)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b28759cb95 advisory. New version 3.4.1, a couple of fixes for the 3.4.0 release. Tenable has extracted the preceding description block directly from the Fedora security advisory...

CBL Mariner 2.0 Security Update: rsync (CVE-2024-12087)

The version of rsync installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12087 advisory. - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option,...

Fedora 41 : git-lfs (2025-1de066b8af)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1de066b8af advisory. Update to latest version Fix CVE-2024-53263 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...