47 matches found
CVE-2024-14007 TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information Disclosure
Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware used by many white-labeled DVR/NVR/IPC products versions prior to 1.3.4 contain an authentication bypass in the NVMS-9000 control protocol. By sending a single crafted TCP payload to an exposed NVMS-9000 control port, an unauthenticated...
Apple iTunes < 12.13.3 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.13.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 121328 advisory. - A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 f...
Cisco ASA Authentication Bypass (EXTRABACON)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA Authentication Bypass EXTRABACON', 'Description' = %q This module patches the authentication functions of a Cisco ASA to allow...
Apple iTunes < 12.12.3 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...
Microsoft RDP RCE (CVE-2019-0708) (BlueKeep) (uncredentialed check)
Binary data msrdpcve-2019-0708.nbin...
MS16-136: Security Update for SQL Server (3199641) (uncredentialed check)
The remote Microsoft SQL Server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the SQL RDBMS Engine due to improper handling of pointer casting. An authenticated, remote attacker can exploit these t...
Microsoft Exchange Server Detection (Uncredentialed)
Binary data exchangedetect.nbin...
MS09-003: Microsoft Exchange Remote Code Execution (959239) (Uncredentialed)
The remote host is running a version of Microsoft Exchange that is affected by a memory corruption vulnerability that could lead to remote code execution when processing a specially crafted TNEF message as well as a denial of service vulnerability when processing a specially crafted MAPI command...
Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)
According to the version number obtained by NTLM the remote host has Windows Server 2008 installed. The host may be vulnerable to a number of vulnerabilities including remote unauthenticated code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108811;...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker can exploit these vulnerabilities, via a...
Trend Micro Control Manager Detection (uncredentialed)
Binary data trendmicrocontrolmanagerdetectunauth.nbin...
Cisco ASA Authentication Bypass (EXTRABACON)
This module patches the authentication functions of a Cisco ASA to allow uncredentialed logins. Uses improved shellcode for payload...
MS15-058: Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718) (uncredentialed check)
The remote Microsoft SQL Server installation is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to the casting of pointers to an incorrect class. An authenticated, remote attacker can exploit this, via a specially crafted SQL query, to gain elevated...
HP LoadRunner 11.52 Buffer Overflow RCE (uncredentialed check)
Binary data hploadrunnerHPSBGN03286rce.nbin...
Apple iTunes < 12.0.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 12.0.1. It is, therefore, affected by multiple vulnerabilities related to the included version of WebKit. The errors could lead to application crashes or arbitrary code execution. Note that Nessus has not tested for this issue but...
MS07-029: Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966) (uncredentialed check)
According to its self-reported version number, the Microsoft DNS Server running on the remote host contains an issue that could allow an attacker to execute arbitrary code with SYSTEM privileges. To exploit this issue, an attacker needs to connect to the DNS server RPC interface and send malforme...
3S CoDeSys Runtime Toolkit NULL Pointer Dereference (uncredentialed check)
Binary data scadacodesysplcwinnt24744remote.nbin...
CA ARCserve Backup Remote Code Execution (CA20121018) (uncredentialed check)
Binary data arcservebackupcve-2012-2971.nbin...
Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 10.7. It is, therefore, affected by multiple memory corruption vulnerabilities in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62078; scriptversion"1.16"; scriptcvsdate"Date:...