0 ratings0% found this document useful (0 votes)
27 views40 pagesNmap 7.94 Scan Report Summary
Uploaded by
malikmustafa.ibaCopyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0 ratings0% found this document useful (0 votes)
27 views40 pagesNmap 7.94 Scan Report Summary
Uploaded by
malikmustafa.ibaCopyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
Starting Nmap 7.94SVN ( [Link]
org ) at 2024-05-11 15:34 CDT
Stats: 0:04:52 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 99.90% done; ETC: 15:39 (0:00:00 remaining)
Stats: 0:04:54 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 99.90% done; ETC: 15:39 (0:00:00 remaining)
Stats: 0:04:54 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 99.90% done; ETC: 15:39 (0:00:00 remaining)
Stats: 0:04:55 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 99.90% done; ETC: 15:39 (0:00:00 remaining)
Stats: 0:04:59 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 99.90% done; ETC: 15:39 (0:00:00 remaining)
Nmap scan report for [Link] ([Link])
Host is up (0.0035s latency).
Not shown: 977 closed tcp ports (conn-refused)
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.3.4
| vulners:
| cpe:/a:vsftpd:vsftpd:2.3.4:
| PRION:CVE-2011-2523 10.0 [Link]
2523
| EDB-ID:49757 10.0 [Link]
*EXPLOIT*
|_ 1337DAY-ID-36095 10.0 [Link]
*EXPLOIT*
| ftp-vsftpd-backdoor:
| VULNERABLE:
| vsFTPd version 2.3.4 backdoor
| State: VULNERABLE (Exploitable)
| IDs: CVE:CVE-2011-2523 BID:48539
| vsFTPd version 2.3.4 backdoor, this was reported on 2011-07-04.
| Disclosure date: 2011-07-03
| Exploit results:
| Shell command: id
| Results: uid=0(root) gid=0(root)
| References:
| [Link]
exploits/unix/ftp/vsftpd_234_backdoor.rb
| [Link]
[Link]
| [Link]
|_ [Link]
22/tcp open ssh OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0)
| vulners:
| cpe:/a:openbsd:openssh:4.7p1:
| SSV:78173 7.8 [Link] *EXPLOIT*
| SSV:69983 7.8 [Link] *EXPLOIT*
| EDB-ID:24450 7.8 [Link]
*EXPLOIT*
| EDB-ID:15215 7.8 [Link]
*EXPLOIT*
| SECURITYVULNS:VULN:8166 7.5
[Link]
| PRION:CVE-2010-4478 7.5 [Link]
4478
| CVE-2012-1577 7.5 [Link]
| CVE-2010-4478 7.5 [Link]
| SSV:20512 7.2 [Link] *EXPLOIT*
| PRION:CVE-2011-1013 7.2 [Link]
1013
| PRION:CVE-2008-1657 6.5 [Link]
1657
| CVE-2008-1657 6.5 [Link]
| SSV:60656 5.0 [Link] *EXPLOIT*
| PRION:CVE-2011-2168 5.0 [Link]
2168
| PRION:CVE-2010-5107 5.0 [Link]
5107
| CVE-2010-5107 5.0 [Link]
| CVE-2010-4816 5.0 [Link]
| PRION:CVE-2010-4755 4.0 [Link]
4755
| PRION:CVE-2010-4754 4.0 [Link]
4754
| PRION:CVE-2012-0814 3.5 [Link]
0814
| PRION:CVE-2011-5000 3.5 [Link]
5000
| CVE-2023-51767 3.5 [Link]
| CVE-2012-0814 3.5 [Link]
| CVE-2011-5000 3.5 [Link]
| PRION:CVE-2011-4327 2.1 [Link]
4327
| CVE-2011-4327 2.1 [Link]
| PRION:CVE-2008-3259 1.2 [Link]
3259
| CVE-2008-3259 1.2 [Link]
|_ SECURITYVULNS:VULN:9455 0.0
[Link]
23/tcp open telnet Linux telnetd
25/tcp open smtp Postfix smtpd
| smtp-vuln-cve2010-4344:
|_ The SMTP server is not Exim: NOT VULNERABLE
| ssl-poodle:
| VULNERABLE:
| SSL POODLE information leak
| State: VULNERABLE
| IDs: CVE:CVE-2014-3566 BID:70574
| The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
| products, uses nondeterministic CBC padding, which makes it easier
| for man-in-the-middle attackers to obtain cleartext data via a
| padding-oracle attack, aka the "POODLE" issue.
| Disclosure date: 2014-10-14
| Check results:
| TLS_RSA_WITH_AES_128_CBC_SHA
| References:
| [Link]
| [Link]
| [Link]
|_ [Link]
| ssl-dh-params:
| VULNERABLE:
| Anonymous Diffie-Hellman Key Exchange MitM Vulnerability
| State: VULNERABLE
| Transport Layer Security (TLS) services that use anonymous
| Diffie-Hellman key exchange only provide protection against passive
| eavesdropping, and are vulnerable to active man-in-the-middle attacks
| which could completely compromise the confidentiality and integrity
| of any data exchanged over the resulting session.
| Check results:
| ANONYMOUS DH GROUP 1
| Cipher Suite: TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
| Modulus Type: Safe prime
| Modulus Source: Unknown/Custom-generated
| Modulus Length: 512
| Generator Length: 8
| Public Key Length: 512
| References:
| [Link]
|
| Transport Layer Security (TLS) Protocol DHE_EXPORT Ciphers Downgrade MitM
(Logjam)
| State: VULNERABLE
| IDs: CVE:CVE-2015-4000 BID:74733
| The Transport Layer Security (TLS) protocol contains a flaw that is
| triggered when handling Diffie-Hellman key exchanges defined with
| the DHE_EXPORT cipher. This may allow a man-in-the-middle attacker
| to downgrade the security of a TLS session to 512-bit export-grade
| cryptography, which is significantly weaker, allowing the attacker
| to more easily break the encryption and monitor or tamper with
| the encrypted stream.
| Disclosure date: 2015-5-19
| Check results:
| EXPORT-GRADE DH GROUP 1
| Cipher Suite: TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
| Modulus Type: Safe prime
| Modulus Source: Unknown/Custom-generated
| Modulus Length: 512
| Generator Length: 8
| Public Key Length: 512
| References:
| [Link]
| [Link]
| [Link]
|
| Diffie-Hellman Key Exchange Insufficient Group Strength
| State: VULNERABLE
| Transport Layer Security (TLS) services that use Diffie-Hellman groups
| of insufficient strength, especially those using one of a few commonly
| shared groups, may be susceptible to passive eavesdropping attacks.
| Check results:
| WEAK DH GROUP 1
| Cipher Suite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
| Modulus Type: Safe prime
| Modulus Source: postfix builtin
| Modulus Length: 1024
| Generator Length: 8
| Public Key Length: 1024
| References:
|_ [Link]
|_sslv2-drown: ERROR: Script execution failed (use -d to debug)
53/tcp open domain ISC BIND 9.4.2
| vulners:
| cpe:/a:isc:bind:9.4.2:
| SSV:2853 10.0 [Link] *EXPLOIT*
| PRION:CVE-2008-0122 10.0 [Link]
0122
| SSV:60184 8.5 [Link] *EXPLOIT*
| PRION:CVE-2012-1667 8.5 [Link]
1667
| CVE-2012-1667 8.5 [Link]
| SSV:60292 7.8 [Link] *EXPLOIT*
| PRION:CVE-2014-8500 7.8 [Link]
8500
| PRION:CVE-2012-5166 7.8 [Link]
5166
| PRION:CVE-2012-4244 7.8 [Link]
4244
| PRION:CVE-2012-3817 7.8 [Link]
3817
| CVE-2014-8500 7.8 [Link]
| CVE-2012-5166 7.8 [Link]
| CVE-2012-4244 7.8 [Link]
| CVE-2012-3817 7.8 [Link]
| CVE-2008-4163 7.8 [Link]
| PRION:CVE-2010-0382 7.6 [Link]
0382
| CVE-2010-0382 7.6 [Link]
| EXPLOITPACK:D6DDF5E24DE171DAAD71FD95FC1B67F2 7.2
[Link]
*EXPLOIT*
| EDB-ID:42121 7.2 [Link]
*EXPLOIT*
| CVE-2017-3141 7.2 [Link]
| PRION:CVE-2015-8461 7.1 [Link]
8461
| CVE-2015-8461 7.1 [Link]
| PRION:CVE-2015-8704 6.8 [Link]
8704
| PRION:CVE-2009-0025 6.8 [Link]
0025
| CVE-2021-25216 6.8 [Link]
| CVE-2015-8704 6.8 [Link]
| CVE-2009-0025 6.8 [Link]
| PRION:CVE-2015-8705 6.6 [Link]
8705
| CVE-2015-8705 6.6 [Link]
| PRION:CVE-2010-3614 6.4 [Link]
3614
| CVE-2010-3614 6.4 [Link]
| SSV:4636 5.8 [Link] *EXPLOIT*
| SSV:30099 5.0 [Link] *EXPLOIT*
| SSV:20595 5.0 [Link] *EXPLOIT*
| PRION:CVE-2016-9444 5.0 [Link]
9444
| PRION:CVE-2016-2848 5.0 [Link]
2848
| PRION:CVE-2015-8000 5.0 [Link]
8000
| PRION:CVE-2012-1033 5.0 [Link]
1033
| PRION:CVE-2011-4313 5.0 [Link]
4313
| PRION:CVE-2011-1910 5.0 [Link]
1910
| PACKETSTORM:157836 5.0
[Link] *EXPLOIT*
| FBC03933-7A65-52F3-83F4-4B2253A490B6 5.0
[Link]
*EXPLOIT*
| CVE-2023-3341 5.0 [Link]
| CVE-2022-2795 5.0 [Link]
| CVE-2021-25219 5.0 [Link]
| CVE-2021-25215 5.0 [Link]
| CVE-2020-8616 5.0 [Link]
| CVE-2017-3145 5.0 [Link]
| CVE-2016-9444 5.0 [Link]
| CVE-2016-9131 5.0 [Link]
| CVE-2016-8864 5.0 [Link]
| CVE-2016-2848 5.0 [Link]
| CVE-2016-1286 5.0 [Link]
| CVE-2015-8000 5.0 [Link]
| CVE-2012-1033 5.0 [Link]
| CVE-2011-4313 5.0 [Link]
| CVE-2011-1910 5.0 [Link]
| SSV:11919 4.3 [Link] *EXPLOIT*
| PRION:CVE-2010-0097 4.3 [Link]
0097
| PRION:CVE-2009-0696 4.3 [Link]
0696
| CVE-2020-8617 4.3 [Link]
| CVE-2017-3143 4.3 [Link]
| CVE-2017-3142 4.3 [Link]
| CVE-2016-2775 4.3 [Link]
| CVE-2016-1285 4.3 [Link]
| CVE-2010-0097 4.3 [Link]
| CVE-2009-0696 4.3 [Link]
| 1337DAY-ID-34485 4.3 [Link]
*EXPLOIT*
| PRION:CVE-2010-0290 4.0 [Link]
0290
| CVE-2020-8622 4.0 [Link]
| CVE-2016-6170 4.0 [Link]
| CVE-2010-0290 4.0 [Link]
| SSV:14986 2.6 [Link] *EXPLOIT*
| PRION:CVE-2009-4022 2.6 [Link]
4022
| CVE-2009-4022 2.6 [Link]
| PACKETSTORM:142800 0.0
[Link] *EXPLOIT*
|_ 1337DAY-ID-27896 0.0 [Link]
*EXPLOIT*
80/tcp open http Apache httpd 2.2.8 ((Ubuntu) DAV/2)
| http-sql-injection:
| Possible sqli for queries:
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
security%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
| [Link]
| [Link]
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%[Link]%2FLouisville
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&forwardurl=https%3A%2F%[Link]%2Fen-US%2Ffirefox
%2Fcollections%2Fjdruin%2Fpr%2F
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2Fblog%2F
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider&forwardurl=http%3A%2F%[Link]%2F
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
security%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
security%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%[Link]%27%20OR%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
| [Link]
%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider
| [Link]
%27%20OR%20sqlspider&username=anonymous
| [Link]
%27%20OR%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
%20sqlspider
| [Link]
[Link]%27%20OR%20sqlspider
| [Link]
%20sqlspider
|_ [Link]
%20sqlspider
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-trace: TRACE is enabled
| http-slowloris-check:
| VULNERABLE:
| Slowloris DOS attack
| State: LIKELY VULNERABLE
| IDs: CVE:CVE-2007-6750
| Slowloris tries to keep many connections to the target web server open and
hold
| them open as long as possible. It accomplishes this by opening connections
to
| the target web server and sending a partial request. By doing so, it
starves
| the http server's resources causing Denial Of Service.
|
| Disclosure date: 2009-09-17
| References:
| [Link]
|_ [Link]
| http-enum:
| /tikiwiki/: Tikiwiki
| /test/: Test page
| /[Link]: Possible information file
| /phpMyAdmin/: phpMyAdmin
| /doc/: Potentially interesting directory w/ listing on 'apache/2.2.8 (ubuntu)
dav/2'
| /icons/: Potentially interesting folder w/ directory listing
|_ /index/: Potentially interesting folder
|_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
|_http-server-header: Apache/2.2.8 (Ubuntu) DAV/2
| http-csrf:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=[Link]
| Found the following possible CSRF vulnerabilities:
|
| Path: [Link]
| Form id:
| Form action: [Link]
|
| Path: [Link]
[Link]
| Form id: id-bad-cred-tr
| Form action: [Link]?page=[Link]
|
| Path: [Link]
| Form id: idloginform
|_ Form action: [Link]?page=[Link]
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| vulners:
| cpe:/a:apache:http_server:2.2.8:
| SSV:72403 7.8 [Link] *EXPLOIT*
| SSV:2820 7.8 [Link] *EXPLOIT*
| SSV:26043 7.8 [Link] *EXPLOIT*
| SSV:20899 7.8 [Link] *EXPLOIT*
| PACKETSTORM:126851 7.8
[Link] *EXPLOIT*
| PACKETSTORM:123527 7.8
[Link] *EXPLOIT*
| PACKETSTORM:122962 7.8
[Link] *EXPLOIT*
| EXPLOITPACK:186B5FCF5C57B52642E62C06BABC6F83 7.8
[Link]
*EXPLOIT*
| EDB-ID:18221 7.8 [Link]
*EXPLOIT*
| CVE-2011-3192 7.8 [Link]
| 1337DAY-ID-21170 7.8 [Link]
*EXPLOIT*
| SSV:12673 7.5 [Link] *EXPLOIT*
| SSV:12626 7.5 [Link] *EXPLOIT*
| ECC3E825-EE29-59D3-BE28-1B30DB15940E 7.5
[Link]
*EXPLOIT*
| CVE-2017-7679 7.5 [Link]
| CVE-2017-3167 7.5 [Link]
| SSV:11802 7.1 [Link] *EXPLOIT*
| SSV:11762 7.1 [Link] *EXPLOIT*
| CVE-2009-1891 7.1 [Link]
| CVE-2009-1890 7.1 [Link]
| SSV:60427 6.9 [Link] *EXPLOIT*
| SSV:60386 6.9 [Link] *EXPLOIT*
| SSV:60069 6.9 [Link] *EXPLOIT*
| CVE-2012-0883 6.9 [Link]
| SSV:12447 6.8 [Link] *EXPLOIT*
| PACKETSTORM:127546 6.8
[Link] *EXPLOIT*
| CVE-2016-5387 6.8 [Link]
| CVE-2014-0226 6.8 [Link]
| 1337DAY-ID-22451 6.8 [Link]
*EXPLOIT*
| CVE-2024-24824 6.5 [Link]
| SSV:11568 6.4 [Link] *EXPLOIT*
| CVE-2017-9788 6.4 [Link]
| CVE-2017-12171 6.4 [Link]
| CVE-2009-1956 6.4 [Link]
| VULNERLAB:967 5.8 [Link]
*EXPLOIT*
| VULNERABLE:967 5.8 [Link]
*EXPLOIT*
| SSV:67231 5.8 [Link] *EXPLOIT*
| SSV:18637 5.8 [Link] *EXPLOIT*
| SSV:15088 5.8 [Link] *EXPLOIT*
| SSV:12600 5.8 [Link] *EXPLOIT*
| PACKETSTORM:84112 5.8
[Link] *EXPLOIT*
| EXPLOITPACK:8B4E7E8DAE5A13C8250C6C33307CD66C 5.8
[Link]
*EXPLOIT*
| EDB-ID:10579 5.8 [Link]
*EXPLOIT*
| CVE-2009-3555 5.8 [Link]
| CVE-2024-2406 5.5 [Link]
| SSV:60788 5.1 [Link] *EXPLOIT*
| CVE-2013-1862 5.1 [Link]
| SSV:96537 5.0 [Link] *EXPLOIT*
| SSV:62058 5.0 [Link] *EXPLOIT*
| SSV:61874 5.0 [Link] *EXPLOIT*
| SSV:20993 5.0 [Link] *EXPLOIT*
| SSV:20979 5.0 [Link] *EXPLOIT*
| SSV:20969 5.0 [Link] *EXPLOIT*
| SSV:19592 5.0 [Link] *EXPLOIT*
| SSV:15137 5.0 [Link] *EXPLOIT*
| SSV:12005 5.0 [Link] *EXPLOIT*
| PACKETSTORM:105672 5.0
[Link] *EXPLOIT*
| PACKETSTORM:105591 5.0
[Link] *EXPLOIT*
| F7F6E599-CEF4-5E03-8E10-FE18C4101E38 5.0
[Link]
*EXPLOIT*
| EXPLOITPACK:C8C256BE0BFF5FE1C0405CB0AA9C075D 5.0
[Link]
*EXPLOIT*
| EXPLOITPACK:460143F0ACAE117DD79BD75EDFDA154B 5.0
[Link]
*EXPLOIT*
| EDB-ID:42745 5.0 [Link]
*EXPLOIT*
| EDB-ID:17969 5.0 [Link]
*EXPLOIT*
| E5C174E5-D6E8-56E0-8403-D287DE52EB3F 5.0
[Link]
*EXPLOIT*
| DB6E1BBD-08B1-574D-A351-7D6BB9898A4A 5.0
[Link]
*EXPLOIT*
| CVE-2023-31122 5.0 [Link]
| CVE-2017-9798 5.0 [Link]
| CVE-2016-8743 5.0 [Link]
| CVE-2015-3183 5.0 [Link]
| CVE-2014-0231 5.0 [Link]
| CVE-2014-0098 5.0 [Link]
| CVE-2013-6438 5.0 [Link]
| CVE-2013-5704 5.0 [Link]
| CVE-2011-3368 5.0 [Link]
| CVE-2010-1623 5.0 [Link]
| CVE-2010-1452 5.0 [Link]
| CVE-2010-0408 5.0 [Link]
| CVE-2009-3720 5.0 [Link]
| CVE-2009-3560 5.0 [Link]
| CVE-2009-3095 5.0 [Link]
| CVE-2009-2699 5.0 [Link]
| CVE-2008-2364 5.0 [Link]
| CVE-2007-6750 5.0 [Link]
| B0208442-6E17-5772-B12D-B5BE30FA5540 5.0
[Link]
*EXPLOIT*
| A820A056-9F91-5059-B0BC-8D92C7A31A52 5.0
[Link]
*EXPLOIT*
| 9814661A-35A4-5DB7-BB25-A1040F365C81 5.0
[Link]
*EXPLOIT*
| 5A864BCC-B490-5532-83AB-2E4109BB3C31 5.0
[Link]
*EXPLOIT*
| 1337DAY-ID-28573 5.0 [Link]
*EXPLOIT*
| SSV:11668 4.9 [Link] *EXPLOIT*
| SSV:11501 4.9 [Link] *EXPLOIT*
| CVE-2009-1195 4.9 [Link]
| SSV:30024 4.6 [Link] *EXPLOIT*
| CVE-2012-0031 4.6 [Link]
| 1337DAY-ID-27465 4.6 [Link]
*EXPLOIT*
| SSV:23169 4.4 [Link] *EXPLOIT*
| CVE-2011-3607 4.4 [Link]
| 1337DAY-ID-27473 4.4 [Link]
*EXPLOIT*
| SSV:60905 4.3 [Link] *EXPLOIT*
| SSV:60657 4.3 [Link] *EXPLOIT*
| SSV:60653 4.3 [Link] *EXPLOIT*
| SSV:60345 4.3 [Link] *EXPLOIT*
| SSV:4786 4.3 [Link] *EXPLOIT*
| SSV:3804 4.3 [Link] *EXPLOIT*
| SSV:30094 4.3 [Link] *EXPLOIT*
| SSV:30056 4.3 [Link] *EXPLOIT*
| SSV:24250 4.3 [Link] *EXPLOIT*
| SSV:19320 4.3 [Link] *EXPLOIT*
| SSV:11558 4.3 [Link] *EXPLOIT*
| PACKETSTORM:109284 4.3
[Link] *EXPLOIT*
| CVE-2016-4975 4.3 [Link]
| CVE-2014-0118 4.3 [Link]
| CVE-2013-1896 4.3 [Link]
| CVE-2012-4558 4.3 [Link]
| CVE-2012-3499 4.3 [Link]
| CVE-2012-0053 4.3 [Link]
| CVE-2011-4317 4.3 [Link]
| CVE-2011-3639 4.3 [Link]
| CVE-2010-0434 4.3 [Link]
| CVE-2009-0023 4.3 [Link]
| CVE-2008-2939 4.3 [Link]
| CVE-2008-0455 4.3 [Link]
| CVE-2007-6420 4.3 [Link]
| CVE-2024-24823 3.6 [Link]
| CVE-2016-8612 3.3 [Link]
| SSV:12628 2.6 [Link] *EXPLOIT*
| CVE-2023-45802 2.6 [Link]
| CVE-2012-2687 2.6 [Link]
| CVE-2009-3094 2.6 [Link]
| CVE-2008-0456 2.6 [Link]
| SSV:60250 1.2 [Link] *EXPLOIT*
|_ CVE-2011-4415 1.2 [Link]
111/tcp open rpcbind 2 (RPC #100000)
| rpcinfo:
| program version port/proto service
| 100000 2 111/tcp rpcbind
| 100000 2 111/udp rpcbind
| 100003 2,3,4 2049/tcp nfs
| 100003 2,3,4 2049/udp nfs
| 100005 1,2,3 36082/udp mountd
| 100005 1,2,3 54960/tcp mountd
| 100021 1,3,4 40806/tcp nlockmgr
| 100021 1,3,4 41160/udp nlockmgr
| 100024 1 33292/udp status
|_ 100024 1 37008/tcp status
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
| vulners:
| Samba smbd 3.X - 4.X:
| SSV:93139 10.0 [Link] *EXPLOIT*
| SAMBA_IS_KNOWN_PIPENAME 10.0
[Link] *EXPLOIT*
| SAINT:C50A339EFD5B2F96051BC00F96014CAA 10.0
[Link] *EXPLOIT*
| SAINT:6FE788CBA26F517C02B44A699047593B 10.0
[Link] *EXPLOIT*
| SAINT:3579A721D51A069C725493EA48A26E42 10.0
[Link] *EXPLOIT*
| MSF:EXPLOIT-LINUX-SAMBA-IS_KNOWN_PIPENAME- 10.0
[Link]
*EXPLOIT*
| EXPLOITPACK:11BDEE18B40708887778CCF837705185 10.0
[Link]
*EXPLOIT*
| EDB-ID:42084 10.0 [Link]
*EXPLOIT*
| EDB-ID:42060 10.0 [Link]
*EXPLOIT*
| CVE-2017-7494 10.0 [Link]
| 1337DAY-ID-27859 10.0 [Link]
*EXPLOIT*
| 1337DAY-ID-27836 10.0 [Link]
*EXPLOIT*
| PACKETSTORM:160127 9.3
[Link] *EXPLOIT*
| MSF:AUXILIARY-ADMIN-DCERPC-CVE_2020_1472_ZEROLOGON- 9.3
[Link]
CVE_2020_1472_ZEROLOGON- *EXPLOIT*
| FC661572-B96B-5B2C-B12F-E8D279E189BF 9.3
[Link]
*EXPLOIT*
| F472C105-E3B1-524A-BBF5-1C436185F6EE 9.3
[Link]
*EXPLOIT*
| F085F702-F1C3-5ACB-99BE-086DA182D98B 9.3
[Link]
*EXPLOIT*
| EDB-ID:49071 9.3 [Link]
*EXPLOIT*
| E9F25671-2BEF-5E8B-A60A-55C6DD9DE820 9.3
[Link]
*EXPLOIT*
| DEC5B8BB-1933-54FF-890E-9C2720E9966E 9.3
[Link]
*EXPLOIT*
| D7AB3F4A-8E41-5E5B-B987-99AFB571FE9C 9.3
[Link]
*EXPLOIT*
| D3C401E0-D013-59E2-8FFB-6BEF41DA3D1B 9.3
[Link]
*EXPLOIT*
| D178DAA4-01D0-50D0-A741-1C3C76A7D023 9.3
[Link]
*EXPLOIT*
| CVE-2020-1472 9.3 [Link]
| CF07CF32-0B8E-58E5-A410-8FA68D411ED0 9.3
[Link]
*EXPLOIT*
| C841D92F-11E1-5077-AE70-CA2FEF0BC96E 9.3
[Link]
*EXPLOIT*
| C7F6FB3B-581D-53E1-A2BF-C935FE7B03C8 9.3
[Link]
*EXPLOIT*
| C7CE5D12-A4E5-5FF2-9F07-CD5E84B4C02F 9.3
[Link]
*EXPLOIT*
| C5B49BD0-D347-5AEB-A774-EE7BB35688E9 9.3
[Link]
*EXPLOIT*
| BBE1926E-1EC7-5657-8766-3CA8418F815C 9.3
[Link]
*EXPLOIT*
| BA280EB1-2FF9-52DA-8BA4-A276A1158DD8 9.3
[Link]
*EXPLOIT*
| B7C1C535-3653-5D12-8922-4C6A5CCBD5F3 9.3
[Link]
*EXPLOIT*
| AEF449B8-DC3E-544A-A748-5A1C6F7EBA59 9.3
[Link]
*EXPLOIT*
| A24AC1AC-55EF-51D8-B696-32F369DCAB96 9.3
[Link]
*EXPLOIT*
| 9C9BD402-511C-597D-9864-647131FE6647 9.3
[Link]
*EXPLOIT*
| 939F3BE7-AF69-5351-BD56-12412FA184C5 9.3
[Link]
*EXPLOIT*
| 87B06BBD-7ED2-5BD2-95E1-21EE66501505 9.3
[Link]
*EXPLOIT*
| 879CF3A7-ECBC-552A-A044-5E2724F63279 9.3
[Link]
*EXPLOIT*
| 7078ED42-959E-5242-BE9D-17F2F99C76A8 9.3
[Link]
*EXPLOIT*
| 6FB0B63E-DE9A-5065-B577-ECA3ED5E9F4B 9.3
[Link]
*EXPLOIT*
| 63C36F7A-5F99-5A79-B99F-260360AC237F 9.3
[Link]
*EXPLOIT*
| 5E80DB20-575C-537A-9B83-CCFCCB55E448 9.3
[Link]
*EXPLOIT*
| 5B025A0D-055E-552C-B1FB-287C6F191F8E 9.3
[Link]
*EXPLOIT*
| 50FA6373-CBCD-5EF5-B37D-0ECD621C6134 9.3
[Link]
*EXPLOIT*
| 4CB63A18-5D6F-57E3-8CD8-9110CF63E120 9.3
[Link]
*EXPLOIT*
| 49EC151F-12F0-59CF-960C-25BD54F46680 9.3
[Link]
*EXPLOIT*
| 3F400483-1F7E-5BE5-8612-4D55D450D553 9.3
[Link]
*EXPLOIT*
| 2E71FF50-1B48-5A8E-9212-C4CF9399715C 9.3
[Link]
*EXPLOIT*
| 2D16FB2A-7A61-5E45-AAF8-1E090E0ADCC0 9.3
[Link]
*EXPLOIT*
| 28D42B84-AB24-5FC6-ADE1-610374D67F21 9.3
[Link]
*EXPLOIT*
| 2255B39F-1B91-56F4-A323-8704808620D3 9.3
[Link]
*EXPLOIT*
| 20466D13-6C5B-5326-9C8B-160E9BE37195 9.3
[Link]
*EXPLOIT*
| 14BD2DBD-3A91-55FC-9836-14EF9ABF56CF 9.3
[Link]
*EXPLOIT*
| 1337DAY-ID-35274 9.3 [Link]
*EXPLOIT*
| 12E44744-1AF0-523A-ACA2-593B4D33E014 9.3
[Link]
*EXPLOIT*
| 0CFAB531-412C-57A0-BD9E-EF072620C078 9.3
[Link]
*EXPLOIT*
| 07E56BF6-A72B-5ACD-A2FF-818C48E4E132 9.3
[Link]
*EXPLOIT*
| 07DF268C-467E-54A3-B713-057BA19C72F7 9.3
[Link]
*EXPLOIT*
| 06BAC40D-74DF-5994-909F-3A87FC3B76C8 9.3
[Link]
*EXPLOIT*
| 04BCA9BC-E3AD-5234-A5F0-7A1ED826F600 9.3
[Link]
*EXPLOIT*
| 042AB58A-C86A-5A8B-AED3-2FF3624E97E3 9.3
[Link]
*EXPLOIT*
| CVE-2020-25719 9.0 [Link]
| CVE-2020-17049 9.0 [Link]
| CVE-2020-25717 8.5 [Link]
| CVE-2020-10745 7.8 [Link]
| CVE-2022-45141 7.5 [Link]
| CVE-2022-32744 6.5 [Link]
| CVE-2022-2031 6.5 [Link]
| CVE-2022-0336 6.5 [Link]
| CVE-2021-3738 6.5 [Link]
| CVE-2020-25722 6.5 [Link]
| CVE-2020-25721 6.5 [Link]
| CVE-2020-25718 6.5 [Link]
| CVE-2018-10858 6.5 [Link]
| CVE-2018-1057 6.5 [Link]
| CVE-2016-2123 6.5 [Link]
| CVE-2019-14870 6.4 [Link]
| CVE-2019-10197 6.4 [Link]
| CVE-2018-16860 6.0 [Link]
| CVE-2017-2619 6.0 [Link]
| CVE-2022-37967 5.8 [Link]
| CVE-2022-32745 5.8 [Link]
| CVE-2017-12151 5.8 [Link]
| CVE-2017-12150 5.8 [Link]
| CVE-2022-32746 5.5 [Link]
| CVE-2019-3880 5.5 [Link]
| CVE-2019-14902 5.5 [Link]
| CVE-2022-38023 5.1 [Link]
| CVE-2022-32743 5.0 [Link]
| CVE-2021-23192 5.0 [Link]
| CVE-2021-20277 5.0 [Link]
| CVE-2020-27840 5.0 [Link]
| CVE-2020-14303 5.0 [Link]
| CVE-2020-10704 5.0 [Link]
| CVE-2021-20254 4.9 [Link]
| CVE-2019-14833 4.9 [Link]
| CVE-2017-12163 4.8 [Link]
| CVE-2019-10218 4.3 [Link]
| CVE-2018-16857 4.3 [Link]
| CVE-2018-16853 4.3 [Link]
| CVE-2018-1139 4.3 [Link]
| CVE-2016-2124 4.3 [Link]
| CVE-2023-0614 4.0 [Link]
| CVE-2023-0225 4.0 [Link]
| CVE-2022-3592 4.0 [Link]
| CVE-2022-3437 4.0 [Link]
| CVE-2022-32742 4.0 [Link]
| CVE-2021-3671 4.0 [Link]
| CVE-2021-3670 4.0 [Link]
| CVE-2020-14383 4.0 [Link]
| CVE-2020-14318 4.0 [Link]
| CVE-2020-10760 4.0 [Link]
| CVE-2020-10730 4.0 [Link]
| CVE-2019-19344 4.0 [Link]
| CVE-2019-14847 4.0 [Link]
| CVE-2018-16851 4.0 [Link]
| CVE-2018-16841 4.0 [Link]
| CVE-2018-14629 4.0 [Link]
| CVE-2018-14628 4.0 [Link]
| CVE-2018-10919 4.0 [Link]
| CVE-2018-10918 4.0 [Link]
| CVE-2021-20316 3.6 [Link]
| CVE-2019-3870 3.6 [Link]
| SSV:92840 3.5 [Link] *EXPLOIT*
| CVE-2021-44141 3.5 [Link]
| CVE-2019-14861 3.5 [Link]
| CVE-2018-16852 3.5 [Link]
| CVE-2018-1140 3.3 [Link]
| CVE-2018-1050 3.3 [Link]
| CVE-2016-2125 3.3 [Link]
| CVE-2023-0922 2.6 [Link]
| CVE-2021-20251 2.6 [Link]
| CVE-2020-10700 2.6 [Link]
| CVE-2019-14907 2.6 [Link]
| CVE-2020-14323 2.1 [Link]
| CVE-2011-3585 1.9 [Link]
| CVE-2022-1615 1.7 [Link]
| PACKETSTORM:142782 0.0
[Link] *EXPLOIT*
| PACKETSTORM:142715 0.0
[Link] *EXPLOIT*
| PACKETSTORM:142657 0.0
[Link] *EXPLOIT*
| 1337DAY-ID-29999 0.0 [Link]
*EXPLOIT*
|_ 1337DAY-ID-27447 0.0 [Link]
*EXPLOIT*
445/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
| vulners:
| Samba smbd 3.X - 4.X:
| SSV:93139 10.0 [Link] *EXPLOIT*
| SAMBA_IS_KNOWN_PIPENAME 10.0
[Link] *EXPLOIT*
| SAINT:C50A339EFD5B2F96051BC00F96014CAA 10.0
[Link] *EXPLOIT*
| SAINT:6FE788CBA26F517C02B44A699047593B 10.0
[Link] *EXPLOIT*
| SAINT:3579A721D51A069C725493EA48A26E42 10.0
[Link] *EXPLOIT*
| MSF:EXPLOIT-LINUX-SAMBA-IS_KNOWN_PIPENAME- 10.0
[Link]
*EXPLOIT*
| EXPLOITPACK:11BDEE18B40708887778CCF837705185 10.0
[Link]
*EXPLOIT*
| EDB-ID:42084 10.0 [Link]
*EXPLOIT*
| EDB-ID:42060 10.0 [Link]
*EXPLOIT*
| CVE-2017-7494 10.0 [Link]
| 1337DAY-ID-27859 10.0 [Link]
*EXPLOIT*
| 1337DAY-ID-27836 10.0 [Link]
*EXPLOIT*
| PACKETSTORM:160127 9.3
[Link] *EXPLOIT*
| MSF:AUXILIARY-ADMIN-DCERPC-CVE_2020_1472_ZEROLOGON- 9.3
[Link]
CVE_2020_1472_ZEROLOGON- *EXPLOIT*
| FC661572-B96B-5B2C-B12F-E8D279E189BF 9.3
[Link]
*EXPLOIT*
| F472C105-E3B1-524A-BBF5-1C436185F6EE 9.3
[Link]
*EXPLOIT*
| F085F702-F1C3-5ACB-99BE-086DA182D98B 9.3
[Link]
*EXPLOIT*
| EDB-ID:49071 9.3 [Link]
*EXPLOIT*
| E9F25671-2BEF-5E8B-A60A-55C6DD9DE820 9.3
[Link]
*EXPLOIT*
| DEC5B8BB-1933-54FF-890E-9C2720E9966E 9.3
[Link]
*EXPLOIT*
| D7AB3F4A-8E41-5E5B-B987-99AFB571FE9C 9.3
[Link]
*EXPLOIT*
| D3C401E0-D013-59E2-8FFB-6BEF41DA3D1B 9.3
[Link]
*EXPLOIT*
| D178DAA4-01D0-50D0-A741-1C3C76A7D023 9.3
[Link]
*EXPLOIT*
| CVE-2020-1472 9.3 [Link]
| CF07CF32-0B8E-58E5-A410-8FA68D411ED0 9.3
[Link]
*EXPLOIT*
| C841D92F-11E1-5077-AE70-CA2FEF0BC96E 9.3
[Link]
*EXPLOIT*
| C7F6FB3B-581D-53E1-A2BF-C935FE7B03C8 9.3
[Link]
*EXPLOIT*
| C7CE5D12-A4E5-5FF2-9F07-CD5E84B4C02F 9.3
[Link]
*EXPLOIT*
| C5B49BD0-D347-5AEB-A774-EE7BB35688E9 9.3
[Link]
*EXPLOIT*
| BBE1926E-1EC7-5657-8766-3CA8418F815C 9.3
[Link]
*EXPLOIT*
| BA280EB1-2FF9-52DA-8BA4-A276A1158DD8 9.3
[Link]
*EXPLOIT*
| B7C1C535-3653-5D12-8922-4C6A5CCBD5F3 9.3
[Link]
*EXPLOIT*
| AEF449B8-DC3E-544A-A748-5A1C6F7EBA59 9.3
[Link]
*EXPLOIT*
| A24AC1AC-55EF-51D8-B696-32F369DCAB96 9.3
[Link]
*EXPLOIT*
| 9C9BD402-511C-597D-9864-647131FE6647 9.3
[Link]
*EXPLOIT*
| 939F3BE7-AF69-5351-BD56-12412FA184C5 9.3
[Link]
*EXPLOIT*
| 87B06BBD-7ED2-5BD2-95E1-21EE66501505 9.3
[Link]
*EXPLOIT*
| 879CF3A7-ECBC-552A-A044-5E2724F63279 9.3
[Link]
*EXPLOIT*
| 7078ED42-959E-5242-BE9D-17F2F99C76A8 9.3
[Link]
*EXPLOIT*
| 6FB0B63E-DE9A-5065-B577-ECA3ED5E9F4B 9.3
[Link]
*EXPLOIT*
| 63C36F7A-5F99-5A79-B99F-260360AC237F 9.3
[Link]
*EXPLOIT*
| 5E80DB20-575C-537A-9B83-CCFCCB55E448 9.3
[Link]
*EXPLOIT*
| 5B025A0D-055E-552C-B1FB-287C6F191F8E 9.3
[Link]
*EXPLOIT*
| 50FA6373-CBCD-5EF5-B37D-0ECD621C6134 9.3
[Link]
*EXPLOIT*
| 4CB63A18-5D6F-57E3-8CD8-9110CF63E120 9.3
[Link]
*EXPLOIT*
| 49EC151F-12F0-59CF-960C-25BD54F46680 9.3
[Link]
*EXPLOIT*
| 3F400483-1F7E-5BE5-8612-4D55D450D553 9.3
[Link]
*EXPLOIT*
| 2E71FF50-1B48-5A8E-9212-C4CF9399715C 9.3
[Link]
*EXPLOIT*
| 2D16FB2A-7A61-5E45-AAF8-1E090E0ADCC0 9.3
[Link]
*EXPLOIT*
| 28D42B84-AB24-5FC6-ADE1-610374D67F21 9.3
[Link]
*EXPLOIT*
| 2255B39F-1B91-56F4-A323-8704808620D3 9.3
[Link]
*EXPLOIT*
| 20466D13-6C5B-5326-9C8B-160E9BE37195 9.3
[Link]
*EXPLOIT*
| 14BD2DBD-3A91-55FC-9836-14EF9ABF56CF 9.3
[Link]
*EXPLOIT*
| 1337DAY-ID-35274 9.3 [Link]
*EXPLOIT*
| 12E44744-1AF0-523A-ACA2-593B4D33E014 9.3
[Link]
*EXPLOIT*
| 0CFAB531-412C-57A0-BD9E-EF072620C078 9.3
[Link]
*EXPLOIT*
| 07E56BF6-A72B-5ACD-A2FF-818C48E4E132 9.3
[Link]
*EXPLOIT*
| 07DF268C-467E-54A3-B713-057BA19C72F7 9.3
[Link]
*EXPLOIT*
| 06BAC40D-74DF-5994-909F-3A87FC3B76C8 9.3
[Link]
*EXPLOIT*
| 04BCA9BC-E3AD-5234-A5F0-7A1ED826F600 9.3
[Link]
*EXPLOIT*
| 042AB58A-C86A-5A8B-AED3-2FF3624E97E3 9.3
[Link]
*EXPLOIT*
| CVE-2020-25719 9.0 [Link]
| CVE-2020-17049 9.0 [Link]
| CVE-2020-25717 8.5 [Link]
| CVE-2020-10745 7.8 [Link]
| CVE-2022-45141 7.5 [Link]
| CVE-2022-32744 6.5 [Link]
| CVE-2022-2031 6.5 [Link]
| CVE-2022-0336 6.5 [Link]
| CVE-2021-3738 6.5 [Link]
| CVE-2020-25722 6.5 [Link]
| CVE-2020-25721 6.5 [Link]
| CVE-2020-25718 6.5 [Link]
| CVE-2018-10858 6.5 [Link]
| CVE-2018-1057 6.5 [Link]
| CVE-2016-2123 6.5 [Link]
| CVE-2019-14870 6.4 [Link]
| CVE-2019-10197 6.4 [Link]
| CVE-2018-16860 6.0 [Link]
| CVE-2017-2619 6.0 [Link]
| CVE-2022-37967 5.8 [Link]
| CVE-2022-32745 5.8 [Link]
| CVE-2017-12151 5.8 [Link]
| CVE-2017-12150 5.8 [Link]
| CVE-2022-32746 5.5 [Link]
| CVE-2019-3880 5.5 [Link]
| CVE-2019-14902 5.5 [Link]
| CVE-2022-38023 5.1 [Link]
| CVE-2022-32743 5.0 [Link]
| CVE-2021-23192 5.0 [Link]
| CVE-2021-20277 5.0 [Link]
| CVE-2020-27840 5.0 [Link]
| CVE-2020-14303 5.0 [Link]
| CVE-2020-10704 5.0 [Link]
| CVE-2021-20254 4.9 [Link]
| CVE-2019-14833 4.9 [Link]
| CVE-2017-12163 4.8 [Link]
| CVE-2019-10218 4.3 [Link]
| CVE-2018-16857 4.3 [Link]
| CVE-2018-16853 4.3 [Link]
| CVE-2018-1139 4.3 [Link]
| CVE-2016-2124 4.3 [Link]
| CVE-2023-0614 4.0 [Link]
| CVE-2023-0225 4.0 [Link]
| CVE-2022-3592 4.0 [Link]
| CVE-2022-3437 4.0 [Link]
| CVE-2022-32742 4.0 [Link]
| CVE-2021-3671 4.0 [Link]
| CVE-2021-3670 4.0 [Link]
| CVE-2020-14383 4.0 [Link]
| CVE-2020-14318 4.0 [Link]
| CVE-2020-10760 4.0 [Link]
| CVE-2020-10730 4.0 [Link]
| CVE-2019-19344 4.0 [Link]
| CVE-2019-14847 4.0 [Link]
| CVE-2018-16851 4.0 [Link]
| CVE-2018-16841 4.0 [Link]
| CVE-2018-14629 4.0 [Link]
| CVE-2018-14628 4.0 [Link]
| CVE-2018-10919 4.0 [Link]
| CVE-2018-10918 4.0 [Link]
| CVE-2021-20316 3.6 [Link]
| CVE-2019-3870 3.6 [Link]
| SSV:92840 3.5 [Link] *EXPLOIT*
| CVE-2021-44141 3.5 [Link]
| CVE-2019-14861 3.5 [Link]
| CVE-2018-16852 3.5 [Link]
| CVE-2018-1140 3.3 [Link]
| CVE-2018-1050 3.3 [Link]
| CVE-2016-2125 3.3 [Link]
| CVE-2023-0922 2.6 [Link]
| CVE-2021-20251 2.6 [Link]
| CVE-2020-10700 2.6 [Link]
| CVE-2019-14907 2.6 [Link]
| CVE-2020-14323 2.1 [Link]
| CVE-2011-3585 1.9 [Link]
| CVE-2022-1615 1.7 [Link]
| PACKETSTORM:142782 0.0
[Link] *EXPLOIT*
| PACKETSTORM:142715 0.0
[Link] *EXPLOIT*
| PACKETSTORM:142657 0.0
[Link] *EXPLOIT*
| 1337DAY-ID-29999 0.0 [Link]
*EXPLOIT*
|_ 1337DAY-ID-27447 0.0 [Link]
*EXPLOIT*
512/tcp open exec?
513/tcp open login
514/tcp open tcpwrapped
1099/tcp open java-rmi GNU Classpath grmiregistry
| rmi-vuln-classloader:
| VULNERABLE:
| RMI registry default configuration remote code execution vulnerability
| State: VULNERABLE
| Default configuration of RMI registry allows loading classes from remote
URLs which can lead to remote code execution.
|
| References:
|_ [Link]
exploits/multi/misc/java_rmi_server.rb
1524/tcp open bindshell Metasploitable root shell
2049/tcp open nfs 2-4 (RPC #100003)
2121/tcp open ftp ProFTPD 1.3.1
| vulners:
| cpe:/a:proftpd:proftpd:1.3.1:
| SAINT:FD1752E124A72FD3A26EEB9B315E8382 10.0
[Link] *EXPLOIT*
| SAINT:950EB68D408A40399926A4CCAD3CC62E 10.0
[Link] *EXPLOIT*
| SAINT:63FB77B9136D48259E4F0D4CDA35E957 10.0
[Link] *EXPLOIT*
| SAINT:1B08F4664C428B180EEC9617B41D9A2C 10.0
[Link] *EXPLOIT*
| PROFTPD_MOD_COPY 10.0 [Link]
*EXPLOIT*
| PACKETSTORM:162777 10.0
[Link] *EXPLOIT*
| PACKETSTORM:132218 10.0
[Link] *EXPLOIT*
| PACKETSTORM:131567 10.0
[Link] *EXPLOIT*
| PACKETSTORM:131555 10.0
[Link] *EXPLOIT*
| PACKETSTORM:131505 10.0
[Link] *EXPLOIT*
| EDB-ID:49908 10.0 [Link]
*EXPLOIT*
| 1337DAY-ID-36298 10.0 [Link]
*EXPLOIT*
| 1337DAY-ID-23720 10.0 [Link]
*EXPLOIT*
| 1337DAY-ID-23544 10.0 [Link]
*EXPLOIT*
| SSV:26016 9.0 [Link] *EXPLOIT*
| SSV:24282 9.0 [Link] *EXPLOIT*
| PRION:CVE-2011-4130 9.0 [Link]
4130
| CVE-2011-4130 9.0 [Link]
| SSV:96525 7.5 [Link] *EXPLOIT*
| PRION:CVE-2009-0542 7.5 [Link]
0542
| CVE-2019-12815 7.5 [Link]
| 739FE495-4675-5A2A-BB93-EEF94AC07632 7.5
[Link]
*EXPLOIT*
| SSV:20226 7.1 [Link] *EXPLOIT*
| PRION:CVE-2010-3867 7.1 [Link]
3867
| PACKETSTORM:95517 7.1
[Link] *EXPLOIT*
| CVE-2010-3867 7.1 [Link]
| SSV:12447 6.8 [Link] *EXPLOIT*
| SSV:11950 6.8 [Link] *EXPLOIT*
| PRION:CVE-2010-4652 6.8 [Link]
4652
| PRION:CVE-2009-0543 6.8 [Link]
0543
| PRION:CVE-2008-4242 6.8 [Link]
4242
| EDB-ID:33128 6.8 [Link]
*EXPLOIT*
| CVE-2010-4652 6.8 [Link]
| CVE-2009-0543 6.8 [Link]
| SSV:12523 5.8 [Link] *EXPLOIT*
| PRION:CVE-2009-3639 5.8 [Link]
3639
| CVE-2009-3639 5.8 [Link]
| PRION:CVE-2019-19272 5.0 [Link]
19272
| PRION:CVE-2019-19271 5.0 [Link]
19271
| PRION:CVE-2019-19270 5.0 [Link]
19270
| PRION:CVE-2019-18217 5.0 [Link]
18217
| PRION:CVE-2016-3125 5.0 [Link]
3125
| PRION:CVE-2011-1137 5.0 [Link]
1137
| CVE-2023-51713 5.0 [Link]
| CVE-2021-46854 5.0 [Link]
| CVE-2020-9272 5.0 [Link]
| CVE-2019-19272 5.0 [Link]
| CVE-2019-19271 5.0 [Link]
| CVE-2019-19270 5.0 [Link]
| CVE-2019-18217 5.0 [Link]
| CVE-2016-3125 5.0 [Link]
| CVE-2011-1137 5.0 [Link]
| PRION:CVE-2008-7265 4.0 [Link]
7265
| CVE-2008-7265 4.0 [Link]
| PRION:CVE-2017-7418 2.1 [Link]
7418
| CVE-2017-7418 2.1 [Link]
| PRION:CVE-2012-6095 1.2 [Link]
6095
|_ CVE-2012-6095 1.2 [Link]
3306/tcp open mysql MySQL 5.0.51a-3ubuntu5
| vulners:
| cpe:/a:mysql:mysql:5.0.51a-3ubuntu5:
| SSV:19118 8.5 [Link] *EXPLOIT*
| PRION:CVE-2009-2446 8.5 [Link]
2446
| CVE-2009-2446 8.5 [Link]
| SAINT:D505D53863BE216621FDAECA22896071 7.5
[Link] *EXPLOIT*
| SAINT:A9E0BE0CEF71F1F98D3CB3E95173B3D0 7.5
[Link] *EXPLOIT*
| SAINT:79BA92A57C28E796ADD04A6A8AE158CE 7.5
[Link] *EXPLOIT*
| SAINT:3101D21E4D8017EA5B14AF668DC39CAD 7.5
[Link] *EXPLOIT*
| PRION:CVE-2009-4484 7.5 [Link]
4484
| PRION:CVE-2008-0226 7.5 [Link]
0226
| PACKETSTORM:85678 7.5
[Link] *EXPLOIT*
| PACKETSTORM:82247 7.5
[Link] *EXPLOIT*
| CVE-2008-0226 7.5 [Link]
| SSV:15006 6.8 [Link] *EXPLOIT*
| PRION:CVE-2009-5026 6.8 [Link]
5026
| PRION:CVE-2009-4028 6.8 [Link]
4028
| CVE-2009-5026 6.8 [Link]
| CVE-2009-4028 6.8 [Link]
| SSV:19606 6.5 [Link] *EXPLOIT*
| PRION:CVE-2010-1848 6.5 [Link]
1848
| CVE-2010-1848 6.5 [Link]
| SSV:19608 6.0 [Link] *EXPLOIT*
| SSV:15004 6.0 [Link] *EXPLOIT*
| PRION:CVE-2010-1850 6.0 [Link]
1850
| PRION:CVE-2008-7247 6.0 [Link]
7247
| CVE-2010-1850 6.0 [Link]
| CVE-2008-7247 6.0 [Link]
| SSV:19607 5.0 [Link] *EXPLOIT*
| PRION:CVE-2010-3833 5.0 [Link]
3833
| PRION:CVE-2010-1849 5.0 [Link]
1849
| CVE-2010-3833 5.0 [Link]
| CVE-2010-1849 5.0 [Link]
| SSV:3280 4.6 [Link] *EXPLOIT*
| PRION:CVE-2008-4098 4.6 [Link]
4098
| PRION:CVE-2008-2079 4.6 [Link]
2079
| CVE-2008-4098 4.6 [Link]
| CVE-2008-2079 4.6 [Link]
| SSV:15007 4.4 [Link] *EXPLOIT*
| SSV:4042 4.0 [Link] *EXPLOIT*
| SSV:15090 4.0 [Link] *EXPLOIT*
| SSV:15005 4.0 [Link] *EXPLOIT*
| PRION:CVE-2012-0490 4.0 [Link]
0490
| PRION:CVE-2012-0484 4.0 [Link]
0484
| PRION:CVE-2012-0102 4.0 [Link]
0102
| PRION:CVE-2012-0101 4.0 [Link]
0101
| PRION:CVE-2012-0087 4.0 [Link]
0087
| PRION:CVE-2010-3838 4.0 [Link]
3838
| PRION:CVE-2010-3837 4.0 [Link]
3837
| PRION:CVE-2010-3836 4.0 [Link]
3836
| PRION:CVE-2010-3834 4.0 [Link]
3834
| PRION:CVE-2010-3682 4.0 [Link]
3682
| PRION:CVE-2010-3677 4.0 [Link]
3677
| PRION:CVE-2009-4019 4.0 [Link]
4019
| PRION:CVE-2008-3963 4.0 [Link]
3963
| CVE-2012-0490 4.0 [Link]
| CVE-2012-0484 4.0 [Link]
| CVE-2012-0102 4.0 [Link]
| CVE-2012-0101 4.0 [Link]
| CVE-2012-0087 4.0 [Link]
| CVE-2010-3838 4.0 [Link]
| CVE-2010-3837 4.0 [Link]
| CVE-2010-3836 4.0 [Link]
| CVE-2010-3834 4.0 [Link]
| CVE-2010-3682 4.0 [Link]
| CVE-2010-3677 4.0 [Link]
| CVE-2009-4019 4.0 [Link]
| CVE-2008-3963 4.0 [Link]
| PRION:CVE-2010-1626 3.6 [Link]
1626
| CVE-2010-1626 3.6 [Link]
| PRION:CVE-2012-0114 3.0 [Link]
0114
| CVE-2012-0114 3.0 [Link]
| SSV:60413 2.1 [Link] *EXPLOIT*
| PRION:CVE-2012-4452 2.1 [Link]
4452
| PRION:CVE-2012-0075 1.7 [Link]
0075
|_ CVE-2012-0075 1.7 [Link]
|_mysql-vuln-cve2012-2122: ERROR: Script execution failed (use -d to debug)
|_ssl-ccs-injection: No reply from server (TIMEOUT)
5432/tcp open postgresql PostgreSQL DB 8.3.0 - 8.3.7
| ssl-dh-params:
| VULNERABLE:
| Diffie-Hellman Key Exchange Insufficient Group Strength
| State: VULNERABLE
| Transport Layer Security (TLS) services that use Diffie-Hellman groups
| of insufficient strength, especially those using one of a few commonly
| shared groups, may be susceptible to passive eavesdropping attacks.
| Check results:
| WEAK DH GROUP 1
| Cipher Suite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
| Modulus Type: Safe prime
| Modulus Source: Unknown/Custom-generated
| Modulus Length: 1024
| Generator Length: 8
| Public Key Length: 1024
| References:
|_ [Link]
| ssl-ccs-injection:
| VULNERABLE:
| SSL/TLS MITM vulnerability (CCS Injection)
| State: VULNERABLE
| Risk factor: High
| OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h
| does not properly restrict processing of ChangeCipherSpec messages,
| which allows man-in-the-middle attackers to trigger use of a zero
| length master key in certain OpenSSL-to-OpenSSL communications, and
| consequently hijack sessions or obtain sensitive information, via
| a crafted TLS handshake, aka the "CCS Injection" vulnerability.
|
| References:
| [Link]
| [Link]
|_ [Link]
| ssl-poodle:
| VULNERABLE:
| SSL POODLE information leak
| State: VULNERABLE
| IDs: CVE:CVE-2014-3566 BID:70574
| The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
| products, uses nondeterministic CBC padding, which makes it easier
| for man-in-the-middle attackers to obtain cleartext data via a
| padding-oracle attack, aka the "POODLE" issue.
| Disclosure date: 2014-10-14
| Check results:
| TLS_RSA_WITH_AES_128_CBC_SHA
| References:
| [Link]
| [Link]
| [Link]
|_ [Link]
| vulners:
| cpe:/a:postgresql:postgresql:8.3:
| SSV:60718 10.0 [Link] *EXPLOIT*
| PRION:CVE-2013-1903 10.0 [Link]
1903
| PRION:CVE-2013-1902 10.0 [Link]
1902
| CVE-2013-1903 10.0 [Link]
| CVE-2013-1902 10.0 [Link]
| CVE-2019-10164 9.0 [Link]
| SSV:30015 8.5 [Link] *EXPLOIT*
| SSV:19652 8.5 [Link] *EXPLOIT*
| PRION:CVE-2010-1447 8.5 [Link]
1447
| PRION:CVE-2010-1169 8.5 [Link]
1169
| POSTGRESQL:CVE-2013-1900 8.5
[Link]
| POSTGRESQL:CVE-2010-1169 8.5
[Link]
| CVE-2010-1447 8.5 [Link]
| CVE-2010-1169 8.5 [Link]
| SSV:19754 7.5 [Link] *EXPLOIT*
| CVE-2015-3166 7.5 [Link]
| CVE-2015-0244 7.5 [Link]
| SSV:30152 6.8 [Link] *EXPLOIT*
| SECURITYVULNS:VULN:10252 6.8
[Link]
| PRION:CVE-2013-0255 6.8 [Link]
0255
| PRION:CVE-2012-0868 6.8 [Link]
0868
| PRION:CVE-2009-3231 6.8 [Link]
3231
| POSTGRESQL:CVE-2013-0255 6.8
[Link]
| POSTGRESQL:CVE-2012-0868 6.8
[Link]
| POSTGRESQL:CVE-2009-3231 6.8
[Link]
| CVE-2013-0255 6.8 [Link]
| CVE-2012-0868 6.8 [Link]
| CVE-2009-3231 6.8 [Link]
| SSV:62083 6.5 [Link] *EXPLOIT*
| SSV:62016 6.5 [Link] *EXPLOIT*
| SSV:61543 6.5 [Link] *EXPLOIT*
| SSV:19018 6.5 [Link] *EXPLOIT*
| SSV:15153 6.5 [Link] *EXPLOIT*
| SSV:15097 6.5 [Link] *EXPLOIT*
| SSV:15095 6.5 [Link] *EXPLOIT*
| SECURITYVULNS:VULN:10803 6.5
[Link]
| SECURITYVULNS:VULN:10473 6.5
[Link]
| PRION:CVE-2014-0065 6.5 [Link]
0065
| PRION:CVE-2014-0064 6.5 [Link]
0064
| PRION:CVE-2014-0063 6.5 [Link]
0063
| PRION:CVE-2014-0061 6.5 [Link]
0061
| PRION:CVE-2012-0866 6.5 [Link]
0866
| PRION:CVE-2010-4015 6.5 [Link]
4015
| PRION:CVE-2010-0442 6.5 [Link]
0442
| POSTGRESQL:CVE-2014-0065 6.5
[Link]
| POSTGRESQL:CVE-2014-0064 6.5
[Link]
| POSTGRESQL:CVE-2014-0063 6.5
[Link]
| POSTGRESQL:CVE-2014-0061 6.5
[Link]
| POSTGRESQL:CVE-2012-0866 6.5
[Link]
| POSTGRESQL:CVE-2010-4015 6.5
[Link]
| POSTGRESQL:CVE-2009-4136 6.5
[Link]
| POSTGRESQL:CVE-2009-3230 6.5
[Link]
| CVE-2021-32027 6.5 [Link]
| CVE-2015-0243 6.5 [Link]
| CVE-2015-0242 6.5 [Link]
| CVE-2015-0241 6.5 [Link]
| CVE-2014-0065 6.5 [Link]
| CVE-2014-0064 6.5 [Link]
| CVE-2014-0063 6.5 [Link]
| CVE-2014-0061 6.5 [Link]
| CVE-2012-0866 6.5 [Link]
| CVE-2010-4015 6.5 [Link]
| CVE-2010-0442 6.5 [Link]
| SECURITYVULNS:VULN:11183 6.0
[Link]
| PRION:CVE-2010-3433 6.0 [Link]
3433
| PRION:CVE-2010-1170 6.0 [Link]
1170
| POSTGRESQL:CVE-2010-3433 6.0
[Link]
| POSTGRESQL:CVE-2010-1170 6.0
[Link]
| CVE-2022-2625 6.0 [Link]
| CVE-2018-10915 6.0 [Link]
| CVE-2010-3433 6.0 [Link]
| CVE-2010-1170 6.0 [Link]
| SSV:15154 5.8 [Link] *EXPLOIT*
| SSV:15096 5.8 [Link] *EXPLOIT*
| POSTGRESQL:CVE-2009-4034 5.8
[Link]
| CVE-2023-2454 5.8 [Link]
| SSV:19669 5.5 [Link] *EXPLOIT*
| PRION:CVE-2010-1975 5.5 [Link]
1975
| POSTGRESQL:CVE-2010-1975 5.5
[Link]
| CVE-2023-2455 5.5 [Link]
| CVE-2010-1975 5.5 [Link]
| CVE-2021-23214 5.1 [Link]
| PRION:CVE-2011-2483 5.0 [Link]
2483
| CVE-2017-7486 5.0 [Link]
| CVE-2015-3167 5.0 [Link]
| CVE-2011-2483 5.0 [Link]
| SSV:61546 4.9 [Link] *EXPLOIT*
| SSV:60334 4.9 [Link] *EXPLOIT*
| PRION:CVE-2014-0062 4.9 [Link]
0062
| PRION:CVE-2012-3488 4.9 [Link]
3488
| POSTGRESQL:CVE-2014-0062 4.9
[Link]
| POSTGRESQL:CVE-2012-3488 4.9
[Link]
| CVE-2014-0062 4.9 [Link]
| CVE-2012-3488 4.9 [Link]
| SSV:61544 4.6 [Link] *EXPLOIT*
| PRION:CVE-2014-0067 4.6 [Link]
0067
| CVE-2014-0067 4.6 [Link]
| PRION:CVE-2012-2143 4.3 [Link]
2143
| POSTGRESQL:CVE-2012-2143 4.3
[Link]
| POSTGRESQL:CVE-2012-0867 4.3
[Link]
| CVE-2012-2143 4.3 [Link]
| SSV:61547 4.0 [Link] *EXPLOIT*
| SSV:61545 4.0 [Link] *EXPLOIT*
| SSV:60335 4.0 [Link] *EXPLOIT*
| SSV:60186 4.0 [Link] *EXPLOIT*
| SSV:4928 4.0 [Link] *EXPLOIT*
| SECURITYVULNS:VULN:9765 4.0
[Link]
| PRION:CVE-2014-0066 4.0 [Link]
0066
| PRION:CVE-2014-0060 4.0 [Link]
0060
| PRION:CVE-2012-3489 4.0 [Link]
3489
| PRION:CVE-2012-2655 4.0 [Link]
2655
| PRION:CVE-2009-3229 4.0 [Link]
3229
| POSTGRESQL:CVE-2014-0066 4.0
[Link]
| POSTGRESQL:CVE-2014-0060 4.0
[Link]
| POSTGRESQL:CVE-2012-3489 4.0
[Link]
| POSTGRESQL:CVE-2012-2655 4.0
[Link]
| POSTGRESQL:CVE-2009-3229 4.0
[Link]
| POSTGRESQL:CVE-2009-0922 4.0
[Link]
| CVE-2021-3677 4.0 [Link]
| CVE-2021-20229 4.0 [Link]
| CVE-2017-7548 4.0 [Link]
| CVE-2017-7547 4.0 [Link]
| CVE-2014-8161 4.0 [Link]
| CVE-2014-0066 4.0 [Link]
| CVE-2014-0060 4.0 [Link]
| CVE-2012-3489 4.0 [Link]
| CVE-2012-2655 4.0 [Link]
| CVE-2009-3229 4.0 [Link]
| SSV:19322 3.5 [Link] *EXPLOIT*
| PRION:CVE-2010-0733 3.5 [Link]
0733
| PACKETSTORM:127092 3.5
[Link] *EXPLOIT*
| CVE-2021-3393 3.5 [Link]
| CVE-2020-1720 3.5 [Link]
| CVE-2010-0733 3.5 [Link]
|_ CVE-2022-41862 2.6 [Link]
5900/tcp open vnc VNC (protocol 3.3)
6000/tcp open X11 (access denied)
6667/tcp open irc UnrealIRCd
|_irc-unrealircd-backdoor: Looks like trojaned version of unrealircd. See
[Link]
8009/tcp open ajp13 Apache Jserv (Protocol v1.3)
8180/tcp open http Apache Tomcat/Coyote JSP engine 1.1
| http-csrf:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=[Link]
| Found the following possible CSRF vulnerabilities:
|
| Path: [Link]
| Form id: username
|_ Form action: j_security_check;jsessionid=20364626B26D03516783AE7DBEF71B83
|_http-server-header: Apache-Coyote/1.1
| http-slowloris-check:
| VULNERABLE:
| Slowloris DOS attack
| State: LIKELY VULNERABLE
| IDs: CVE:CVE-2007-6750
| Slowloris tries to keep many connections to the target web server open and
hold
| them open as long as possible. It accomplishes this by opening connections
to
| the target web server and sending a partial request. By doing so, it
starves
| the http server's resources causing Denial Of Service.
|
| Disclosure date: 2009-09-17
| References:
| [Link]
|_ [Link]
| vulners:
| cpe:/a:apache:coyote_http_connector:1.1:
| PRION:CVE-2023-26044 5.0 [Link]
26044
| PRION:CVE-2022-36032 5.0 [Link]
36032
| OSV:CVE-2023-26044 5.0 [Link]
26044
| OSV:CVE-2022-36032 5.0 [Link]
36032
|_ OSV:BIT-APACHE-2021-31618 5.0 [Link]
APACHE-2021-31618
| http-cookie-flags:
| /admin/:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/admin_login.html:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/admin_login.jsp:
| JSESSIONID:
| httponly flag not set
| /admin/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/view/javascript/fckeditor/editor/filemanager/connectors/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/includes/FCKeditor/editor/filemanager/upload/[Link]:
| JSESSIONID:
| httponly flag not set
| /admin/jscript/[Link]:
| JSESSIONID:
|_ httponly flag not set
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-enum:
| /admin/: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/admin_login.html: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/[Link]: Possible admin folder
| /admin/admin_login.jsp: Possible admin folder
| /admin/[Link]: Possible admin folder
| /manager/html/upload: Apache Tomcat (401 Unauthorized)
| /manager/html: Apache Tomcat (401 Unauthorized)
| /admin/view/javascript/fckeditor/editor/filemanager/connectors/[Link]:
OpenCart/FCKeditor File upload
| /admin/includes/FCKeditor/editor/filemanager/upload/[Link]: ASP Simple
Blog / FCKeditor File Upload
| /admin/jscript/[Link]: Lizard Cart/Remote File upload
|_ /webdav/: Potentially interesting folder
Service Info: Hosts: [Link], [Link]; OSs:
Unix, Linux; CPE: cpe:/o:linux:linux_kernel
Host script results:
|_smb-vuln-ms10-054: false
|_smb-vuln-regsvc-dos: ERROR: Script execution failed (use -d to debug)
|_smb-vuln-ms10-061: false
Service detection performed. Please report any incorrect results at
[Link] .
Nmap done: 1 IP address (1 host up) scanned in 387.95 seconds
You might also like
- network security assesment report. to understandNo ratings yetnetwork security assesment report. to understand24 pages
- Vulnerabilities in TLS and SMTP ServicesNo ratings yetVulnerabilities in TLS and SMTP Services3 pages
- Nessus Report: Vulnerabilities OverviewNo ratings yetNessus Report: Vulnerabilities Overview230 pages
- Cybersecurity Enumeration & Vulnerability GuideNo ratings yetCybersecurity Enumeration & Vulnerability Guide10 pages
- Metasploitable - Advanced Scan - Us5pc1No ratings yetMetasploitable - Advanced Scan - Us5pc1240 pages
- Task 02 Network Security Report Chandan PrasadNo ratings yetTask 02 Network Security Report Chandan Prasad16 pages
- Nessus Vulnerability Report for 192.168.1.2No ratings yetNessus Vulnerability Report for 192.168.1.2244 pages
- Vulnerabilities in Pure-FTPd and OpenSSHNo ratings yetVulnerabilities in Pure-FTPd and OpenSSH78 pages
- Shell PDF Security Vulnerabilities ReportNo ratings yetShell PDF Security Vulnerabilities Report7 pages
- Vulnerability Scan Results - BSK Assignment 4No ratings yetVulnerability Scan Results - BSK Assignment 428 pages
- AIG Vulnerability Assessment Report 2015No ratings yetAIG Vulnerability Assessment Report 201557 pages
- Security Scan Report for IP 192.168.56.101No ratings yetSecurity Scan Report for IP 192.168.56.10172 pages
- OpenVAS Vulnerability Assessment ReportNo ratings yetOpenVAS Vulnerability Assessment Report68 pages
- Trainer/Assessor Matrix Submission GuideNo ratings yetTrainer/Assessor Matrix Submission Guide14 pages
- CTF Guide: Types, Skills, and ResourcesNo ratings yetCTF Guide: Types, Skills, and Resources15 pages
- PPE Management Procedures and GuidelinesNo ratings yetPPE Management Procedures and Guidelines6 pages
- Power Plant Engineering R K Hegde Ebook & TestbankNo ratings yetPower Plant Engineering R K Hegde Ebook & Testbank251 pages
- Understanding Marketing Concepts and StrategiesNo ratings yetUnderstanding Marketing Concepts and Strategies4 pages
- Authentic South Indian Biriyani DeliveryNo ratings yetAuthentic South Indian Biriyani Delivery5 pages
- Understanding Past Perfect Tense in FrenchNo ratings yetUnderstanding Past Perfect Tense in French14 pages
- Revitalizing Artisan Communities through ArchitectureNo ratings yetRevitalizing Artisan Communities through Architecture4 pages
- Pension Funds Derivative Investment StandardsNo ratings yetPension Funds Derivative Investment Standards107 pages