New VA Modules: MSF: 9, Nessus: 22

[New VA Module Alert Service <postmaster () insecure org>]

This report describes any new scripts/modules/exploits added to Nmap,
Metasploit, Nessus, and OpenVAS since yesterday.

== Metasploit modules (9) ==

ea7bba40 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb
Beetel Connection Manager NetConfig.ini Buffer Overflow

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/ispconfig_php_exec.rb
ISPConfig Authenticated Arbitrary PHP Code Execution

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/moodle_cmd_exec.rb
Moodle Remote Command Execution

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/nas4free_php_exec.rb
NAS4Free Arbitrary Remote Code Execution

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/openbravo_xxe.rb
Openbravo ERP XXE Arbitrary File Read

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/openmediavault_cmd_exec.rb
OpenMediaVault Cron Remote Command Execution

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/vtiger_php_exec.rb
vTigerCRM v5.4.0/v5.3.0 Authenticated Remote Code Execution

5b769477 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/zabbix_script_exec.rb
Zabbix Authenticated Remote Command Execution

32794f9d 
https://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/admin/http/openbravo_xxe.rb
Openbravo ERP XXE Arbitrary File Read

== Nessus plugins (22) ==

70720 bugzilla_4_4_1.nasl
http://nessus.org/plugins/index.php?view=single&id=70720
Bugzilla < 4.0.11 / 4.2.7 / 4.4.1 Multiple Vulnerabilities

70719 seamonkey_222.nasl
http://nessus.org/plugins/index.php?view=single&id=70719
SeaMonkey < 2.22 Multiple Vulnerabilities

70718 mozilla_thunderbird_24_1.nasl
http://nessus.org/plugins/index.php?view=single&id=70718
Mozilla Thunderbird < 24.1 Multiple Vulnerabilities

70717 mozilla_thunderbird_17010_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70717
Mozilla Thunderbird ESR < 17.0.10 Multiple Vulnerabilities

70716 mozilla_firefox_25.nasl
http://nessus.org/plugins/index.php?view=single&id=70716
Firefox < 25.0 Multiple Vulnerabilities

70715 mozilla_firefox_24_1_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70715
Firefox ESR 24.x < 24.1 Multiple Vulnerabilities

70714 mozilla_firefox_17010_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70714
Firefox ESR < 17.0.10 Multiple Vulnerabilities

70713 macosx_thunderbird_24_1.nasl
http://nessus.org/plugins/index.php?view=single&id=70713
Thunderbird < 24.1 Multiple Vulnerabilities (Mac OS X)

70712 macosx_thunderbird_17_0_10_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70712
Thunderbird ESR < 17.0.10 Multiple Vulnerabilities (Mac OS X)

70711 macosx_firefox_25.nasl
http://nessus.org/plugins/index.php?view=single&id=70711
Firefox < 25.0 Multiple Vulnerabilities (Mac OS X)

70710 macosx_firefox_24_1_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70710
Firefox ESR 24.x < 24.1 Multiple Vulnerabilities (Mac OS X)

70709 macosx_firefox_17_0_10_esr.nasl
http://nessus.org/plugins/index.php?view=single&id=70709
Firefox ESR < 17.0.10 Multiple Vulnerabilities (Mac OS X)

70708 sl_20131030_thunderbird_on_SL5_x.nasl
http://nessus.org/plugins/index.php?view=single&id=70708
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x
i386/x86_64

70707 sl_20131029_spice_server_on_SL6_x.nasl
http://nessus.org/plugins/index.php?view=single&id=70707
Scientific Linux Security Update : spice-server on SL6.x x86_64

70706 sl_20131029_qspice_on_SL5_x.nasl
http://nessus.org/plugins/index.php?view=single&id=70706
Scientific Linux Security Update : qspice on SL5.x x86_64

70705 sl_20131029_postgresql_and_postgresql84_on_SL5_x.nasl
http://nessus.org/plugins/index.php?view=single&id=70705
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x,
SL6.x i386/x86_64

70704 sl_20131029_firefox_on_SL5_x.nasl
http://nessus.org/plugins/index.php?view=single&id=70704
Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64

70703 redhat-RHSA-2013-1480.nasl
http://nessus.org/plugins/index.php?view=single&id=70703
RHEL 5 / 6 : thunderbird (RHSA-2013-1480)

70702 oraclelinux_ELSA-2013-1480.nasl
http://nessus.org/plugins/index.php?view=single&id=70702
Oracle Linux 6 : thunderbird (ELSA-2013-1480)

70701 freebsd_pkg_81f866ad41a411e3a4af0025905a4771.nasl
http://nessus.org/plugins/index.php?view=single&id=70701
FreeBSD : mozilla -- multiple vulnerabilities
(81f866ad-41a4-11e3-a4af-0025905a4771)

70700 fedora_2013-19745.nasl
http://nessus.org/plugins/index.php?view=single&id=70700
Fedora 18 : roundcubemail-0.9.5-1.fc18 (2013-19745)

70699 centos_RHSA-2013-1480.nasl
http://nessus.org/plugins/index.php?view=single&id=70699
CentOS 5 / 6 : thunderbird (CESA-2013:1480)
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/