Microsoft Windows Security Center Settings

By connecting to the remote host with the supplied credentials, this plugin enumerates Windows Security Center settings on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38687; scriptversion"1.8"; scriptcvsdate"Date: 2018/11/15 20:50:28";...

Tenable Security Center Default Credentials

Tenable Network Security's Security Center, an asset-based security and compliance monitoring application, is installed on the remote system. By supplying default credentials, it is possible to log into the remote web application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

reporting CVE

Hello, CVE-2005-2573 is reported for MySQL 4.1.x before 4.1.13 and MySQL 5.0 before 5.0.7. However. I tested this vulnerability in MySQL 5.0.51a on Windows xp sp2, and found this version vulnerable too. According to CVE-2008-4098, that is reported because of an incomplete fix for CVE-2008-4097, i...

SMB Registry : Start the Registry Service during the scan

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service RemoteRegistry. If the service is down, this plugin will attempt to start for the duration of the scan. You need to explicitly enable this option for this plugin to work: 'Start the Remote...

QQ client website link filtering is not strict can lead to URL spoofing-vulnerability warning-the black bar safety net

Vulnerability description: QQ is our most used chat tool, QQ Security Center from the 2 0 0 6 The official version of the launch of the website, the link protection function: QQ2006 official version is optimized for unsafe links shield, the tip function, the limit of these phishing sites, malicio...

mw6pdf417-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1...

Security Center < 3.4 Multiple Unspecified Traversals

Binary data 4714.prm...

Security Center < 3.4.2.1 Directory Traversal Arbitrary File Access

The version of Tenable Security Center installed on the remote host appears to be earlier than 3.4.2.1. Such versions contain two vulnerabilities that allow a user who was logged into the Security Center to obtain system files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Surf fixes a few security vulnerabilities-vulnerability warning-the black bar safety net

In 80sec notification to travel into the presence of the security vulnerability after that, surf to 6. 3 0 released a new version of the browser, fixes the previously mentioned security vulnerability, the specific update can be found http://blog. maxthon. cn/, the update fixes three security...

KingSoft UpdateOcx2.dll SetUninstallName() Heap Overflow Exploit

金山在线杀毒,百度安全中心在线杀毒,雅虎助手等使用的在线杀毒引擎均受影响. PoC代码: ----------------------------------------------------------------------------------- object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target1'/object object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target2'/object script v...

McAfee multiple antiviral products Security Center ActiveX buffer overflow

Buffer overflow in IsOldAppInstalled function...

McAfee Security Center IsOldAppInstalled ActiveX BoF Exploit

No description provided by source. / McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability Peel the frame from axis,Thanks Test on Windows2000 and dll version Mcsubmgr.dll 6.0.0.15 Greetz to OYXin, sowhat, Winny Thomas and 0x557 team / include stdio.h include stdlib.h...

McAfee Security Center McSubMgr.DLL ActiveX控件远程溢出漏洞

McAfee Security Center是用于控制和监控McAfee安全产品的集中配置GUI。 McAfee Security Center的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SecurityCenter所安装的Subscription Manager ActiveX控件： ProgId：McSubMgr.McSubMgr ClassId：9BE8D7B2-329C-442A-A4AC-ABA9D7572602 文件：MCSUBMGR.DLL, McAfee Subscription manager module 6.0.0.13...

McAfee Security Center IsOldAppInstalled ActiveX BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================ McAfee Security Center IsOldAppInstalled ActiveX BoF Exploit ============================================================ / McAfee Security Center IsOldAppInstalled ActiveX Buffer...

CVE-2006-4899

The ePPIServlet script in Computer Associates CA eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" single quote in the PIProfile function, which leaks the path in an error message...

McAfee Subscription Manager ActiveX buffer overflow

Added: 08/25/2006 CVE: CVE-2006-3961 BID: 19265 OSVDB: 27698 Background McAfee Antivirus products access the McAfee Security Center product which allows users to set preferences and settings for numerous installed McAfee components and services. The Security Center includes a Subscription Manager...

McAfee Subscription Manager ActiveX buffer overflow

Added: 08/25/2006 CVE: CVE-2006-3961 BID: 19265 OSVDB: 27698 Background McAfee Antivirus products access the McAfee Security Center product which allows users to set preferences and settings for numerous installed McAfee components and services. The Security Center includes a Subscription Manager...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...

CVE-2006-3961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

CVE-2005-3657

The CVE-2005-3657 issue affects McAfee Security Center’s MCINSCTL.DLL ActiveX control. The McLog object (MCINSTALL.McLog) allows logging, but the control does not restrict which domains may load it because it does not use the IObjectSafetySiteLock API. This enables remote attackers to create or a...