Adobe Recent Files

Nessus was able to query Adobe settings on the remote Windows host to find recently opened Adobe file information. C Tenable Network Security, Inc. include"compat.inc"; if !definedfunc"nasllevel" || nasllevel 5200 exit0, "Not Nessus 5.2+"; if description scriptid92414; scriptversion"1.6";...

Apple iTunes < 12.4.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker can...

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities. - Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic...

Adobe Flash Player <= 22.0.0.192 Multiple Vulnerabilities (APSB16-25)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 22.0.0.192. It is, therefore, affected by multiple Vulnerabilities : - Multiple memory corruption issues exist that allow a remote attacker to execute arbitrary code. CVE-2016-4172, CVE-2016-4175,...

Malicious File Detection Using Yara

Binary data wmimalwareyarafilesystem.nbin...

Adobe Creative Cloud Desktop < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities : - An untrusted search path vulnerability exists in the installer due to looking for specific files or libraries in the current working...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...

MS16-076: Security Update for Netlogon (3167691)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability due to improper handling of objects in memory. A domain-authenticated attacker can exploit this, via a specially crafted Netlogon request to a domain controller, to execute...

HP LoadRunner 11.52 / 12.00 / 12.01 / 12.02 / 12.50 Multiple Vulnerabilities

The version of HP LoadRunner installed on the remote Windows host is 11.52, 12.00, 12.01, 12.02, or 12.50, without the HPSBGN03609 hotfix. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied...

Adobe Creative Cloud <= 3.5.1.209 Arbitrary File Read/Write Vulnerability

The version of Adobe Creative Cloud installed on the remote Windows host is prior or equal to 3.5.1.209. It is, therefore, affected by a flaw in the JavaScript API for Creative Cloud Libraries due to an exposed service. An unauthenticated, remote attacker can exploit this to read or write arbitra...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...

MS16-064: Security Update for Adobe Flash Player (3163207)

The remote Windows host is missing KB3163207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple use-after-free errors exist that allow an attacker to execute...

Microsoft Windows Hyper-V Information Leakage Vulnerability

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. An information leakage vulnerability exists in Hyper-V for Microsoft Windows, which arises from a program's failure to properly validate input from an authenticated...

MS16-039: Security Update for Microsoft Graphics Component (3148522)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to a failure to properly handle objects in memory. An attacker can exploit these...

Malicious File Detection

Binary data wmimalwarescanfilescan.nbin...

Malicious File Detection: User Defined Malware

Binary data wmimalwareusermd5sfilescan.nbin...

Google Chrome < 49.0.2623.108 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 49.0.2623.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update24 advisory. - The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in...

Adobe AIR <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)

The version of Adobe AIR installed on the remote Windows host is prior or equal to version 20.0.0.260. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2016-0963, CVE-2016-0993, CVE-2016-101...

Firefox < 45 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 45. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a special...

Adobe Digital Editions < 4.5.1 RCE (APSB16-06)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.1. It is, therefore, affected by a remote code execution vulnerability due to improper validation of user-supplied input. An attacker can exploit this to corrupt memory, resulting in the execution of...