Nmap Development mailing list archives

New VA Modules: MSF: 7, Nessus: 8, OpenVAS: 12


From: New VA Module Alert Service <postmaster () insecure org>
Date: Sat, 10 Aug 2013 10:01:13 +0000 (UTC)

This report describes any new scripts/modules/exploits added to Nmap,
Metasploit, Nessus, and OpenVAS since yesterday.

== Metasploit modules (7) ==

4a127c2e 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/linux/http/hp_sys_mgmt_exec.rb
HP System Management Homepage JustGetSNMPQueue Command Injection

8cc07cc5 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/hp_sys_mgmt_exec.rb
HP System Management Homepage JustGetSNMPQueue Command Injection

3e6de5d2 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/post/windows/gather/dnscache_dump.rb
Windows Gather DNS Cache

dd35495f 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb
D-Link Devices Unauthenticated Remote Command Execution

69a86b60 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/unix/webapp/squash_yaml_exec.rb
Squash YAML Code Exec

d1beb313 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb
Firefox onreadystatechange Event DocumentViewerImpl Use After Free

c808930f 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/openx_backdoor_php.rb
OpenX Backdoor PHP Code Execution

== Nessus plugins (8) ==

69284 splunk_504.nasl
http://nessus.org/plugins/index.php?view=single&id=69284
Splunk < 5.0.4 X-FRAME-OPTIONS Clickjacking Weakness

69283 hp_laserjetpro_saverestore_pwd_disclosure.nasl
http://nessus.org/plugins/index.php?view=single&id=69283
HP LaserJet Pro /dev/save_restore.xml Administrative Password Disclosure

69282 hp_laserjetpro_iomgmtadapters_wps_pin_disc.nasl
http://nessus.org/plugins/index.php?view=single&id=69282
HP LaserJet Pro /IoMgmt/Adapters/wifi0/WPS/Pin WPS PIN Disclosure

69280 joomla_example_lang_xss.nasl
http://nessus.org/plugins/index.php?view=single&id=69280
Joomla! libraries/idna_convert/example.php lang Parameter XSS

69279 sl_20130807_nss__nss_util__nss_softokn__and_nspr_on_SL6_x.nasl
http://nessus.org/plugins/index.php?view=single&id=69279
Scientific Linux Security Update : nss, nss-util, nss-softokn, and nspr
on SL6.x i386/x86_64

69278 freebsd_pkg_0998e79d005511e3905b0025905a4771.nasl
http://nessus.org/plugins/index.php?view=single&id=69278
FreeBSD : mozilla -- multiple vulnerabilities
(0998e79d-0055-11e3-905b-0025905a4771)

69277 debian_DSA-2735.nasl
http://nessus.org/plugins/index.php?view=single&id=69277
Debian DSA-2735-1 : iceweasel - several vulnerabilities

hp_laserjetpro_data_access3.nbin

== OpenVAS plugins (12) ==

r17395 2013/gb_openx_backdoor_61650.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_openx_backdoor_61650.nasl?root=openvas&view=markup
OpenX 'flowplayer-3.1.1.min.js' Backdoor Vulnerability

r17396 803856 2013/gb_mozilla_thunderbird_mult_vuln_aug13_win.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_thunderbird_mult_vuln_aug13_win.nasl?root=openvas&view=markup
Mozilla Thunderbird Multiple Vulnerabilities - August 13 (Windows)

r17396 803854 2013/gb_mozilla_firefox_esr_mult_vuln_aug13_win.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_firefox_esr_mult_vuln_aug13_win.nasl?root=openvas&view=markup
Mozilla Firefox ESR Multiple Vulnerabilities - August 13 (Windows)

r17396 803860 2013/gb_mozilla_seamonkey_mult_vuln_aug13_win.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_seamonkey_mult_vuln_aug13_win.nasl?root=openvas&view=markup
Mozilla SeaMonkey Multiple Vulnerabilities - August 13 (Windows)

r17396 803853 2013/gb_mozilla_firefox_mult_vuln_aug13_macosx.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_firefox_mult_vuln_aug13_macosx.nasl?root=openvas&view=markup
Mozilla Firefox Multiple Vulnerabilities - August 13 (Mac OS X)

r17396 803859 2013/gb_mozilla_thunderbird_esr_mult_vuln_aug13_macosx.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_thunderbird_esr_mult_vuln_aug13_macosx.nasl?root=openvas&view=markup
Mozilla Thunderbird ESR Multiple Vulnerabilities - August 13 (Mac OS X)

r17396 803852 2013/gb_mozilla_firefox_mult_vuln_aug13_win.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_firefox_mult_vuln_aug13_win.nasl?root=openvas&view=markup
Mozilla Firefox Multiple Vulnerabilities - August 13 (Windows)

r17396 803858 2013/gb_mozilla_thunderbird_esr_mult_vuln_aug13_win.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_thunderbird_esr_mult_vuln_aug13_win.nasl?root=openvas&view=markup
Mozilla Thunderbird ESR Multiple Vulnerabilities - August 13 (Windows)

r17396 803857 2013/gb_mozilla_thunderbird_mult_vuln_aug13_macosx.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_thunderbird_mult_vuln_aug13_macosx.nasl?root=openvas&view=markup
Mozilla Thunderbird Multiple Vulnerabilities - August 13 (Mac OS X)

r17396 803855 2013/gb_mozilla_firefox_esr_mult_vuln_aug13_macosx.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_firefox_esr_mult_vuln_aug13_macosx.nasl?root=openvas&view=markup
Mozilla Firefox ESR Multiple Vulnerabilities - August 13 (Mac OS X)

r17396 803861 2013/gb_mozilla_seamonkey_mult_vuln_aug13_macosx.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_mozilla_seamonkey_mult_vuln_aug13_macosx.nasl?root=openvas&view=markup
Mozilla SeaMonkey Multiple Vulnerabilities - August 13 (Mac OS X)

r17396 2013/gb_wp_wptouch_path_disc_vuln.nasl
http://wald.intevation.org/scm/viewvc.php/trunk/openvas-plugins/scripts/2013/gb_wp_wptouch_path_disc_vuln.nasl?root=openvas&view=markup
WordPress WPtouch Plugin Path Disclosure Vulnerability
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: