Microsoft Windows Message Queuing - Remote Buffer Overflow Universal (MS05-017) (v.0.3)

Microsoft Windows Message Queuing - Remote Buffer Overflow Universal MS05-017 v.0.3 / HOD-ms05017-msmq-expl.c: 2005-06-28: PUBLIC v.0.3 Copyright c 2004-2005 houseofdabus. MS05-017 Message Queuing Buffer Overflow Vulnerability Universal Exploit .:: houseofdabus ::...

IRC Bot Detection

This host seems to be running an ident server, but before any request is sent, the server gives an answer about a connection to port 6667. It is very likely this system has been compromised by an IRC bot and is now a 'zombie' that can participate in 'distributed denial of service' DDoS attacks...

[SA15332] Nuke ET "codigo" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Nuke ET "codigo" Cross-Site Scripting Vulnerability...

myPHP Forum v1, 2 & 3

PHOX: myPHP Forum v1, 2 & 3 Exploits Content - Credits - SMFDBPWNOCS - Solution - Contact Credits Exploit discovered by Phoxpherus Phorce, Phox R&P, Terencentanio Root32 SMFDBPWNOCS - Stupid Mofo Database Spamming When No One Can See In short, forum.php and topic.php have no validation checks. Th...

FCKeditor for PHP-Nuke Arbitrary File Upload

The remote host is running a version of the FCKeditor add-on for PHP-Nuke that allows a remote attacker to upload arbitrary files and run them in the context of the web server user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CERN httpd Double Slash Protected Webpage Bypass

The remote web server allows an attacker to access protected web pages by replacing slashes in the URL with '//' or '/./', which is a known problem in older versions of CERN web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17230; scriptversion"1.19";...

HP-UX Security patch : PHCO_12326

The remote host is missing HP-UX Security Patch number PHCO12326 . Security Bulletin for mediainit1 in HP-UX 9.X and 10.X %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16697;...

HP-UX Security patch : PHNE_9104

The remote host is missing HP-UX Security Patch number PHNE9104 . SYN Flooding Security Vulnerability in HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17042;...

HP-UX Security patch : PHKL_25244

The remote host is missing HP-UX Security Patch number PHKL25244 . Sec. Vulnerability in setrlimit1M rev. 1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16617; scriptversion"1.7"...

HP-UX Security patch : PHNE_13471

The remote host is missing HP-UX Security Patch number PHNE13471 . Security Vulnerability with land on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16530; scriptversion"1.7...

POP Password Changer (poppassd_pam) Arbitrary User Remote Password Modification

The remote host is running POP Password Changer, a server to change POP user's passwords. According to the version number, the remote software is vulnerable to an unauthorized access. An attacker, exploiting this flaw, will be able to change user's password. C Tenable Network Security, Inc...

TeeKai Tracking Online XSS

The remote host runs Teekai Tracking Online, a PHP script used for tracking the number of users on a Web site. This version is vulnerable to cross-site scripting attacks. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution ...

MoonLit Virus Backdoor Detection

The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. Copyright C 2004-2010 KK Liu rev 1.0: MoonLit detection - 07/30/2004 rev 1.1: Description changes rev 1.2: Bug fix...

identd Service UID Association

By using the identd server RFC 1413, it is possible to determine the process owner of the remote service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid14674; scriptversion"1.21";...

Firefox < 0.9.3 Null Character MIME Type Spoofing Arbitrary Code Execution

The installed version of Firefox is earlier than 0.9.3. Such versions may allow arbitrary code execution. The security vulnerability is due to the fact that Firefox stores cached HTML documents with a known file name, and to the fact that it's possible to force Firefox to open cached files as HTM...

Solaris 7 (sparc) : 107374-03

Openwindows 3.6.1: Xview Patch. Date this patch was last updated by Sun : Aug/02/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 108499-01

SunOS 5.6: ASET sets the gid on /tmp, /var/tmp when setting med hi. Date this patch was last updated by Sun : Jan/24/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Zen Cart login.php SQL Injection Vulnerability

Overview: "Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system." Description: An input validation vulnerability has been reported in Zen Cart, allowing a remote user to inject SQL commands. The '/admin/login.php' file does not properly validate...

Apache Tomcat source.jsp Arbitrary Directory Listing

The source.jsp page, distributed with Apache Tomcat, discloses information when given a specially crafted query string. This can reveal information such as the web root path and directory listings. A remote attacker exploit this information to mount further attacks. %NASLMINLEVEL 70300 This scrip...

Novell Groupwise Servlet Manager Default Password

The Novell Groupwise servlet server is configured with a default password. As a result, users could be denied access to mail and other servlet based resources. To test this finding: https:///servlet/ServletManager/ enter 'servlet' for the user and 'manager' for the password. This script was writt...