Spybot Search & Destroy Detection

The remote Windows host is running Spybot Search & Destroy, a privacy enhancing application that can detect and remove spyware of different kinds from your computer. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav and Tenable Network Security Some text descriptions might be excerpted from a...

RealVNC VNC Viewer < 4.1.3/4.4.3 Arbitrary Command Execution

The version of RealVNC's VNC Viewer installed on the remote Windows host is affected by multiple issues : - An error in the 'CMsgReader::readRect' function in 'common/rfb/CMsgReader.cxx' that comes into play when processing encoding types, may allow arbitrary code execution on the remote system. ...

Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC

Exploit for multiple platform in category dos / poc ================================================================= Sun xVM VirtualBox 1.6.4 Privilege Escalation Vulnerability PoC ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cor...

Sun xVM VirtualBox < 1.6.4 Local Privilege Escalation

The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 1.6.4. Such versions reportedly include a kernel driver, 'VBoxDrv.sys', that allows a local user to open the device '.\VBoxDrv' and issue IOCTLs with a buffering method of 'METHODNEITHER'...

Foxit Reader Detection

Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/09"; scriptxrefname:"IAVT", value:"0001-T-0605";...

Cisco Security Agent Detection

Cisco Security Agent, an endpoint security application system is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32130; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...

VLC Detection

VLC, a free and portable media player from the VideoLAN organization, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31852; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

SwiftView Viewer Plugin < 8.3.5 Buffer Overflow

A SwiftView Viewer ActiveX control and/or browser plug-in is installed on the remote Windows host. SwiftView Viewer is an application for viewing and printing print streams. According to its version, the SwiftView ActiveX control / browser plug-in currently installed is affected by a stack-based...

iMesh P2P Client Detection

iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29729; scriptversion"1.15";...

Symantec Mail Security for SMTP File Parsing Vulnerabilities

Symantec Mail Security for SMTP, which provides anti-spam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host reportedly is affected by multiple vulnerabilities caused by buffer...

Trend Micro Scan Engine Tmxpflt.sys Buffer Overflow

The version of Trend Micro AntiVirus installed on the remote Windows host contains a buffer overflow in its 'Tmxpflt.sys' kernel driver. A local attacker may be able to leverage this issue to execute arbitrary code on the affected system in kernel context. C Tenable Network Security, Inc...

Kaspersky Online Scanner kavwebscan.CKAVWebScan ActiveX (kavwebscan.dll) Format String Arbitrary Code Execution

The remote host contains the Kaspersky Online Scanner, an online virus scanner for Windows. The version of the Kaspersky Web Scanner ActiveX control installed as part of this software on the remote host contains a format string vulnerability. By tricking a user on the affected host into visiting ...

R-Viewer < 1.6.3768 Multiple Vulnerabilities

R-Viewer, a secure document viewer from remotedocs.com, is installed on the remote host. According to the registry, the installation of R-Viewer on the remote Windows host allows arbitrary code to be executed without a user's knowledge and stores unencrypted copies of previously-opened documents ...

NetVault Report Manager Scheduler File Name Handling Overflow

The remote host is running NetVault Report Manager, a tool for monitoring backup reports. The Server and Client Scheduler components included in the version of NetVault Report Manager installed on the remote host suffer from a heap overflow vulnerability that can occur when processing overly long...

Symantec Mail Security for SMTP libdayzero.dll Executable Parsing DoS

Symantec Mail Security for SMTP, which provides antispam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host contains boundary errors in its detection of executable packers in...

CVE-2007-1876

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

Trend Micro VsapiNT.sys UPX File Parsing DoS

The version of Trend Micro Antivirus installed on the remote Windows host contains a divide-by-zero error in its 'VsapiNT.sys' kernel driver. Using a specially crafted UPX file, a remote attacker may be able to leverage this flaw to crash the affected host. C Tenable Network Security, Inc...

Symantec Mail Security for SMTP Admin Center Default Credentials

Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...

MailEnable Detection

The remote host is running MailEnable, a commercial mail server for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid23753; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"MailEnable Detection";...