Scrutinizer NetFlow & sFlow Analyzer Detection

Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...

New VPN Hunter Service Scans Domains For Remote-Access Systems

If there’s one thing attackers love, it’s readily accessible remote-connection services running on a target company’s network. Once an attacker knows that an organization is running a specific kind of VPN or has RDP enabled on a bunch of machines, he can then start looking for known vulnerabiliti...

SonicWALL GMS 6 Arbitrary File Upload

This module exploits a code execution flaw in SonicWALL GMS. It exploits two vulnerabilities in order to get its objective. An authentication bypass in the Web Administration interface allows to abuse the "appliance" application and upload an arbitrary payload embedded in a JSP. The module has be...

SonicWALL AntiSpam EMail 7.3.1 - Multiple Vulnerabilities

SonicWALL AntiSpam EMail 7.3.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/51337/info SonicWall AntiSpam & EMail is prone to a cross-site scripting vulnerability, a URI-redirection vulnerability, and an HTML-injection vulnerability because it fails to sufficiently sanitiz...

SonicWall AntiSpam And Email Security 7.x XSS / Redirection

Title: ====== SonicWall AntiSpam & EMail Security v7.x - Multiple Web Vulnerabilities Date: ===== 2012-01-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=58 VL-ID: ===== 58 Introduction: ============= Spam-, Phishing- und mit Viren infizierte Nachrichten verursachen ...

SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities

Document Title: =============== SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=58 Release Date: ============= 2012-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 5...

SonicWALL Aventail SQLi Vulnerability - Active Check

SonicWALL Aventail is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

SonicWALL Aventail 'CategoryID' Parameter SQL Injection Vulnerability

SonicWALL Aventail is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

SonicWALL Aventail SSL-VPN SQL Injection

================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

SonicWALL Aventail SSL-VPN - SQL Injection

SonicWALL Aventail SSL-VPN - SQL Injection ================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar...

SonicWALL Aventail SSL-VPN - SQL Injection

================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)

An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...

SonicWALL Aventail SSL-VPN SQL Injection Vulnerability

Exploit for php platform in category web applications Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Vulnerbility SonicWALL Aventail SSL-VPN is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before usin...

SonicWALL ViewPoint Server Detection

SonicWALL ViewPoint Server reporting software was detected on the remote host. ViewPoint Server is a Windows-based software application that utilizes a built-in web server to provide reporting functionality for SonicWALL hardware and virtual appliances. C Tenable Network Security, Inc...

SonicWALL ViewPoint Server Default Credentials

It is possible to log into SonicWALL ViewPoint Server by providing the default admin credentials. A remote attacker could exploit this to gain administrative control of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gai...

SonicWall NSA 4500 protection bypass

ARP spoofing protection doesn't work if used in conjunction...

Multiple vulnerabilities in SonicWall

While pentesting a a WIFI network on a customer, we found some vulnerabilities in the SonicWall NSA 4500. You can find details here: http://www.pentest.es/vulnssonicpoint.txt -------------------------------------------------- Title: ====== SonicWall products with incompatible MAC spoofing...