Nagios-statd Daemon Detection

Nagios-statd Daemon is running at this port. Nagios-statd nagios-statd Daemon is the daemon program for nagios-stat. These programs together comprise a systems monitoring tool for various platforms. It is designed to be integrated with the Nagios monitoring tool, although this is not a requiremen...

McAfee Antivirus ZIP / RAR Scan Evasion

The McAfee antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the DAT file version of the installed antivirus product is prior to 5600. An attacker can exploit this, by embedding malicious co...

PJblog V3.0 注入漏洞

漏洞文件：action.asp 第14行 strcname=request"cname" set checkcdb=conn.execute"select from blogContent where logcname="""&strcname&"""" PJblog V3.0 官方补丁 ?php / PJblog V3.0 0day exp code by 小蟑螂&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //注入地址 $varname="puterjam"; //管理员...

PJblog V3. 0 0day-vulnerability warning-the black bar safety net

Original link: ? php / PJblog V3. 0 0day exp code by small Roach&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //inject the address $varname="puterjam"; //administrator $varkey="checkright"; if $SESSION"LenI" $LenI=$SESSION"LenI"; else $LenI=1; for$i=$LenI;$i=4 0;$i++...

MDVA-2009:018 : clamav

This update fixes several issues with clamav: - update unexpectely changes location of clamd socket 46459 - clamav-milter was not built 46555 - Clamav-milter wanted to remove postfix 46556 - Scanning mail with clamav leaves a big temporary folder 46642 - Build fails if invoked with --with milter,...

Trend Micro OfficeScan DoS

Crash during virus scanning on large number of folders with long names...

TCP ACK Firewall Scanner

Map out firewall rulesets with a raw ACK scan. Any unfiltered ports found means a stateful firewall is not in place for them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TCP ACK Firewall...

Mandriva Update for hplip MDKSA-2007:201 (hplip)

Check for the Version of hplip OpenVAS Vulnerability Test Mandriva Update for hplip MDKSA-2007:201 hplip Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Integer overflow

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

CVE-2008-6661

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

PT-2009-2131 · Bitdefender · Bitdefender For Linux

Name of the Vulnerable Software and Affected Versions: Bitdefender for Linux versions 7.60825 and earlier Description: The issue is related to multiple integer overflows in the scanning engine, which can be exploited by remote attackers using malformed NeoLite and ASProtect packed PE files. This...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Honeynet Project finds way to fingerprint Conficker infections

Just days ahead of an April 1st activation date for the Conficker worm, a pair of security researchers from the Honeynet Project have scored a major breakthrough, finding a way to remotely and anonymously fingerprint the malware on infected networks. Now, with the help of Dan Kaminsky and Rich...

Vulnerability scanning tools nikto use of experience-vulnerability warning-the black bar safety net

http://www.cirt.net/ official website site http://www.feelids.com/ Author:swap A simple scan of the target basic WEB basic preparation Information, Server, PHP parser and other version information perl nkito.pl –h 192.168.0.1 Multi-port scanning Perl nikto.pl –h 192.168.0.1 –p 8 0, the 8 8, a 4 4...

Nine strokes breakthrough IDS-vulnerability warning-the black bar safety net

Intrusion detectionsystem, The English abbreviation for the IDS, as the name implies, it is used in real time to detect attacks and report the attack. If the firewall than for guarding the network the door the doorman, then theintrusion detectionsystem IDS is proactively looking for criminals in...

Coppermine Photo Gallery keysToSkip Parameter Overwrite

The version of Coppermine Photo Gallery installed on the remote host contains a flaw in the anti-registerglobals protective code in 'include/init.inc.php'. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated, remote attacker can leverage this issue using a specially crafted...

BitDefender Internet Security XSS

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender crossaplication scripting

Filename is displayed without filtering during scanning...

Scrubbr: Stored XSS flaw finder

The HP Security Labs blog is pointing to a new database scanning tool called “Scrubbr” that can help check numerous database technologies for the presence of possible stored cross-site scripting attacks. Scrubbr download here is described a Java program which connects to your database MySQL 5+, M...