5690 matches found
Free Service Targets XSS Bugs in Java Apps
Cross-site scripting bugs have been a major problem for Web site operators for years now, and while their causes and their solutions are both well-understood, they’re still quite pervasive. But a new free service is aiming to help site owners avoid the serious compromises that can follow an attac...
PRTG Network Monitor Detection
Detection of PRTG Network Monitor. The script attempts to identify PRTG Network Monitor and to extract the version number. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Toolza 1.0
=== Toolza1.0 === Nix/Windows/Mac - UTF-8 perlscript download last version at the end of this post /последнюю версию скачать можно снизу этого поста Данная утилита предназначена для тестирования своего веб-ресурса на уязвимости. Любое другое использование скрипта преследуется по закону Last updat...
OpenVAS TCP scanner
This plugin is a classical TCP port scanner. It shall be reasonably quick even against a firewalled target. Once a TCP connection is open, it grabs any available banner for the service identification plugins Note that TCP scanners are more intrusive than SYN half open scanners...
Mac OS X 10.6 < 10.6.6 Multiple Vulnerabilities
Binary data 5739.prm...
HttpBlitz Web Server - Denial of Service
!/usr/bin/python Title: HttpBlitz DOS Date: 12/24/2010 Author: otoy Software Link: http://sourceforge.net/projects/httpblitz/files/HttpBlitz.msi/download Tested on: Windows XP SP3 ====================================================================== / / / / / / / / / / / / / / / / / / / / / / /...
HttpBlitz Web Server - Denial of Service
HttpBlitz Web Server - Denial of Service !/usr/bin/python Title: HttpBlitz DOS Date: 12/24/2010 Author: otoy Software Link: http://sourceforge.net/projects/httpblitz/files/HttpBlitz.msi/download Tested on: Windows XP SP3 ====================================================================== / / /...
[SECURITY] Fedora 13 Update: clamav-0.96.5-1300.fc13
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Mantra: A Browser based Security Framework !
Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...
iscsi-brute NSE Script
Performs brute force password auditing against iSCSI targets. Script Arguments iscsi-brute.target iSCSI target to brute-force. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for t...
[SECURITY] Fedora 14 Update: clamav-0.96.5-1400.fc14
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Nmap NSE: Daytime
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for clamav FEDORA-2010-15443
Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2010-15443 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
SuSE 10 Security Update : clamav (ZYPP Patch Number 7209)
clamav was updated to version 0.96.4 which fixes problems when scanning pdf files CVE-2010-3434 and also contains numerous other bug fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
rsh Authentication Scanner
This module will test a shell rsh service on a range of machines and report successful logins. NOTE: This module requires access to bind to privileged ports below 1024. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow
$Id: proftptelnetiac.rb 10900 2010-11-04 18:12:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Removable Media Security Practices
US-CERT is aware of recent reports indicating that some newly purchased removable media devices are infected with malicious code. This malicious code is a worm that attempts to propagate itself via multiple methods. If a Windows user connects an affected removable media device to a system that ha...
Design/Logic Flaw
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning"...
CVE-2010-3982
SAP BusinessObjects Enterprise XI 3.2 is affected by a vulnerability in the CrystalReports/viewrpt.cwr URI where the apstoken parameter can cause remote TCP connections to arbitrary intranet hosts on any port, exposing potentially sensitive information about open ports (an related internal port s...
CVE-2010-3982
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning"...