1875 matches found
HP LaserJet Pro Printers Unauthorized Data Access
Binary data hplaserjetprodataaccess.nbin...
Debian DSA-2649-1 : lighttpd - fixed socket name in world-writable directory
Stefan Buhler discovered that the Debian specific configuration file for lighttpd webserver FastCGI PHP support used a fixed socket name in the world-writable /tmp directory. A symlink attack or a race condition could be exploited by a malicious user on the same machine to take over the PHP contr...
FreeBSD : puppet26 -- multiple vulnerabilities (04042f95-14b8-4382-a8b9-b30e365776cf)
Moses Mendoza reports : A vulnerability found in Puppet could allow an authenticated client to cause the master to execute arbitrary code while responding to a catalog request. Specifically, in order to exploit the vulnerability, the puppet master must be made to invoke the 'template' or...
Debian DSA-2643-1 : puppet - several vulnerabilities
Multiple vulnerabilities were discovered in Puppet, a centralized configuration management system. - CVE-2013-1640 An authenticated malicious client may request its catalog from the puppet master, and cause the puppet master to execute arbitrary code. The puppet master must be made to invoke the...
PHP 5.3.x < 5.3.22 Multiple Vulnerabilities
Binary data 801086.prm...
Nmap NSE 6.01: mysql-info
Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...
Nmap NSE 6.01: irc-info
Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. OpenVAS Vulnerability Test $Id: gbnmap6ircinfo.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Doug Hoyte NASL-Wrapper: autogenerated Copyright:...
Nmap NSE 6.01: upnp-info
Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...
Nmap NSE 6.01: finger
Attempts to retrieve a list of usernames using the finger service. OpenVAS Vulnerability Test $Id: gbnmap6finger.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Eddie Bell NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner...
Nmap NSE 6.01: nfs-showmount
Shows NFS exports, like the 'showmount -e' command. SYNTAX: nfs.version: number If set overrides the detected version of nfs mount.version: number If set overrides the detected version of mountd rpc.protocol: table If set overrides the preferred order in which protocols are tested. ie. 'tcp', 'ud...
Nmap NSE 6.01: ftp-bounce
Checks to see if an FTP server allows port scanning using the FTP bounce method. SYNTAX: ftp-bounce.username: Username to log in with. Default ''anonymous''. ftp-bounce.password: Password to log in with. Default ''IEUser@''. OpenVAS Vulnerability Test $Id: gbnmap6ftpbounce.nasl 7006 2017-08-25...
Nmap NSE 6.01: ftp-anon
Checks if an FTP server allows anonymous logins. If anonymous is allowed, gets a directory listing of the root directory and highlights writeable files. SYNTAX: ftp-anon.maxlist: The maximum number of files to return in the directory listing. By default it is 20, or unlimited if verbosity is...
Nmap NSE 6.01: auth-owners
Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmap6authowners.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE...
Nmap NSE 6.01: daytime
Retrieves the day and time from the Daytime service. OpenVAS Vulnerability Test $Id: gbnmap6daytime.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Diman Todorov NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.org...
Nmap NSE 6.01: realvnc-auth-bypass
Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. OpenVAS Vulnerability Test $Id: gbnmap6realvncauthbypass.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright:...
Nmap NSE 6.01: http-enum
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[Netsparker Community Edition v2.5.2.0] Released!
Netsparker Community Edition is a SQL Injection Scanner. It’s a free edition of our web vulnerability scanner for the community so you can start securing your website now. It’s user friendly, fast, smart and as always False-Positive-Free. It shares many features with professional edition. It can...
Debian DSA-2634-1 : python-django - several vulnerabilities
Several vulnerabilities have been discovered in Django, a high-level Python web development framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-4520 James Kettle discovered that Django did not properly filter the HTTP Host header when...
[WPScan Android] WordPress Security Scanner Android App
WPScan is a black box WordPress Security Scanner written in Ruby which attempts to find known security weaknesses within WordPress installations. Its intended use it to be for security professionals or WordPress administrators to asses the security posture of their WordPress installations...