VNC Brute Force Login

Try to log in with given passwords via VNC protocol. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SSL/TLS: SSLv3 Protocol CBC Cipher Suites Information Disclosure Vulnerability (POODLE)

This host is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Greenbone Security Assistant (GSA) Default Credentials (HTTP)

The remote Greenbone Security Assistant GSA is installed / configured in a way that it has accounts with default passwords enabled. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows: MS Security Guide: Apply UAC restrictions to local accounts on network logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsguacrestrictionslocalaccounts.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Apply UAC restrictions to local accounts on network logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Get Windows Firewall Profile Status over WMI (win)

Get Windows Firewall Profile Status over WMI. In this Test is currently only an Registry Test for the Microsoft Firewall realized. Later we will test over WMI the Namespace SecurityCenter\FirewallProduct and SecurityCenter2\FirewallProduct for third party Firewall Products. The WMI test can only...

ABB Drive composer pro Detection (Windows SMB Login)

Detects the installed version of ABB Drive composer pro for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HTTP Brute Force Logins With Default Credentials Reporting

It was possible to login into the remote Web Application using default credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

SSL/TLS: TLS/SPDY Protocol Information Disclosure Vulnerability (CRIME)

The TLS/SPDY protocols are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object Remote Code Execution - Active Check

Apache Tomcat/JBoss Application Server is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The rexec service is running

This remote host is running a rexec service. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows: Presence of LAPS AdmPwd GPO Extension / CSE

This test checks the presence of LAPS AdmPwd GPO Extension / CSE on Windows hosts at least Windows 8.1. The Local Administrator Password Solution LAPS tool, which is free and supported software that allows an organization to automatically set randomized and unique local Administrator account...

Fedora Update for dokuwiki FEDORA-2012-16605

Check for the Version of dokuwiki OpenVAS Vulnerability Test Fedora Update for dokuwiki FEDORA-2012-16605 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Unknown OS and Service Banner Reporting

This VT consolidates and reports the information collected by the following VTs: - Collect banner of unknown services OID: 1.3.6.1.4.1.25623.1.0.11154 - Service Detection unknown with nmap OID: 1.3.6.1.4.1.25623.1.0.66286 - Service Detection wrapped with nmap OID: 1.3.6.1.4.1.25623.1.0.108525 - O...

Check for discard Service (TCP)

The remote host is running a SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postel:discard"; ifdescription...

Check for enabled / working Port scanner plugin

The script reports if: - a custom scan configuration is in use without having a Port scanner from the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Siemens WinCC Microsoft SQL (MSSQL) Server Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has Siemens WinCC related default credentials set. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

phpMyAdmin < 4.9.4, 5.x < 5.0.1 SQL Injection Vulnerability (PMASA-2020-1) - Windows

phpMyAdmin is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if...

Microsoft Windows 10: Service: LxssManager

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlxssmanager.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for LxssManager Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Niagara Fox (Flexible Object eXchange) Service Detection

A Niagara Fox Flexible Object eXchange service is running at this host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Web Application Scanning Consolidation / Info Reporting

The script consolidates and reports various information for web application formerly called SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: New / improved code since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Dahua Devices Default Credentials (HTTP)

The remote installation of Dahua Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Linux

Eclipse Jetty Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Microsoft Windows: Enable insecure guest logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Anonymous FTP Login Reporting

Reports if the remote FTP Server allows anonymous logins. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

HTTP 1.0 header overflow

It was possible to kill the web server by sending an invalid request with a too long header From, If-Modified-Since, Referer or Content-Type A cracker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. OpenVAS Vulnerability Test...

Microsoft Visual Studio 2013 Update 5 Information Disclosure Vulnerability (KB4089283)

This host is missing an important security update according to Microsoft KB4089283 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SmarterTools SmarterMail Detection (HTTP)

HTTP based detection of SmarterTools SmarterMail. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dokuwiki FEDORA-2012-16605

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

DistCC RCE Vulnerability (CVE-2004-2687)

DistCC is prone to a remote code execution RCE vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Check the System if Opie-Server and Opie-Client are installed

Check the System if Opie-Server and Opie-Client are installed. Read /etc/pam.d/opie, List Files und /etc/pam.d/ with -include opie- entry, Read ChallengeResponseAuthentication entry in /etc/ssh/sshdconfig SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a...

Hikvision IP Cameras Multiple Vulnerabilities (Sep 2017) - Active Check

Multiple Hikvision IP cameras are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Apache Struts Security Update (S2-053) - Active Check

Apache Struts is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SSL/TLS: OpenSSL CCS Man in the Middle Security Bypass Vulnerability

OpenSSL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DokuWiki Reflected File Download Vulnerability

The call parameter of /lib/exe/ajax.php in DokuWiki does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...

Generic HTTP Directory Traversal / File Inclusion (Web Root) - Active Check

Generic check for HTTP directory traversal / file inclusion vulnerabilities on the web root level of the remote web server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apache Tomcat Server Administration Default/Hardcoded Credentials (HTTP)

The Apache Tomcat Server Administration is using default or known hardcoded credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Improved code and additional detection routine / credentials research since 2016 Greenbone AG Some text descriptions might be excerpted fro...

OpenSSH < 7.2 X11 Forwarding Security Bypass Vulnerability - Linux

OpenSSH is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

Apache Tomcat Manager/Host Manager/Server Status Default/Hardcoded Credentials (HTTP)

The Apache Tomcat Manager/Host Manager/Server Status is using default or known hardcoded credentials. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

AVTech AVC 787 DVR Default Credentials (HTTP)

The remote AVTech AVC 787 DVR device is using known default credentials. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

jQuery < 1.9.0 XSS Vulnerability

jQuery is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jquery:jquery"; if...

RMI Java Deserialization RCE Vulnerability (Jun 2016) - Active Check

The remote host is affected by a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SquirrelMail < 1.4.23 Multiple Vulnerabilities

SquirrelMail is prone to authenticated remote code execution RCE and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TFM MMPlayer '.m3u' Buffer Overflow Vulnerability - July-09

This host is installed with TFM MMPlayer and is prone to stack based Buffer Overflow bulnerability. OpenVAS Vulnerability Test $Id: secpodtfmmmplayerm3ubofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ TFM MM Player '.m3u' Buffer Overflow Vulnerability - July-09 Authors: Nikita MR Copyright:...

VNC Server Unencrypted Data Transmission

The remote host is running a VNC server providing one or more insecure or cryptographically weak Security Types not intended for use on untrusted networks. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

OpenStage SIP Default Credentials (HTTP)

The remote OpenStage SIP Webinterface is using default credentials. Copyright C 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

XOOPS Version Detection

This script detects the installed XOOPS version. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Discourse < 2.4.0.beta2 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities including XSS and SQL injection flaws. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle WebLogic Server Multiple Vulnerabilities (cpujul2017, cpuoct2017)

Oracle WebLogic Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:bea:weblogicserver";...

Source Control Management (SCM) Files/Folders Accessible (HTTP)

The script attempts to identify files/folders of a SCM accessible at the webserver. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

MikroTik RouterOS < 6.49.13, 7.x < 7.14 IPv6 Vulnerability

MikroTik RouterOS is prone to a vulnerability in the IPv6 firewall rule. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...