Metasploit框架中包涵数百个模块,没有人能用脑子把它们的名字全部记下来。在MSF终端中运行show命令会把所有的模块显示出来,也可以指定模块的类型来缩小搜索范围。
1. msf > show exploits
Exploits
========Name Disclosure Date Rank Description---- --------------- ---- -----------aix/rpc_cmsd_opcode21 2009-10-07 great AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 Buffer Overflowaix/rpc_ttdbserverd_realpath 2009-06-17 great ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)apple_ios/browser/safari_libtiff 2006-08-01 good Apple iOS MobileSafari LibTIFF Buffer Overflowapple_ios/email/mobilemail_libtiff 2006-08-01 good Apple iOS MobileMail LibTIFF Buffer Overflowapple_ios/ssh/cydia_default_ssh 2007-07-02 excellent Apple iOS Default SSH Password Vulnerabilitybsdi/softcart/mercantec_softcart 2004-08-19 great Mercantec SoftCart CGI Overflowdialup/multi/login/manyargs 2001-12-12 good System V Derived /bin/login Extraneous Arguments Buffer Overflowfreebsd/ftp/proftp_telnet_iac 2010-11-01 great ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (FreeBSD)freebsd/samba/trans2open 2003-04-07 great Samba trans2open Overflow (*BSD x86)freebsd/tacacs/xtacacsd_report 2008-01-08 average XTACACSD <= 4.1.2 report() Buffer Overflowfreebsd/telnet/telnet_encrypt_keyid 2011-12-23 great FreeBSD Telnet Service Encryption Key ID Buffer Overflowhpux/lpd/cleanup_exec 2002-08-28 excellent HP-UX LPD Command Executionirix/lpd/tagprinter_exec 2001-09-01 excellent Irix LPD tagprinter Command Executionlinux/browser/adobe_flashplayer_aslaunch 2008-12-17 good Adobe Flash Player ActionScript Launch Command Execution Vulnerabilitylinux/ftp/proftp_sreplace 2006-11-26 great ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)linux/ftp/proftp_telnet_iac 2010-11-01 great ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (Linux)linux/games/ut2004_secure 2004-06-18 good Unreal Tournament 2004 "secure" Overflow (Linux)linux/http/alcatel_omnipcx_mastercgi_exec 2007-09-09 manual Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Executionlinux/http/ddwrt_cgibin_exec 2009-07-20 excellent DD-WRT HTTP Daemon Arbitrary Command Executionlinux/http/dolibarr_cmd_exec 2012-04-06 excellent Dolibarr ERP & CRM 3 Post-Auth OS Command Injectionlinux/http/esva_exec 2012-08-16 excellent E-Mail Security Virtual Appliance learn-msg.cgi Command Injectionlinux/http/gpsd_format_string 2005-05-25 average Berlios GPSD Format String Vulnerabilitylinux/http/linksys_apply_cgi 2005-09-13 great Linksys WRT54 Access Point apply.cgi Buffer Overflowlinux/http/openfiler_networkcard_exec 2012-09-04 excellent Openfiler v2.x NetworkCard Command Executionlinux/http/peercast_url 2006-03-08 average PeerCast <= 0.1216 URL Handling Buffer Overflow (linux)linux/http/piranha_passwd_exec 2000-04-04 excellent RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Executionlinux/http/symantec_web_gateway_exec 2012-05-17 excellent Symantec Web Gateway 5.0.2.8 ipchange.php Command Injectionlinux/http/symantec_web_gateway_file_upload 2012-05-17 excellent Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerabilitylinux/http/symantec_web_gateway_lfi 2012-05-17 excellent Symantec Web Gateway 5.0.2.8 relfile File Inclusion Vulnerabilitylinux/http/symantec_web_gateway_pbcontrol 2012-07-23 excellent Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injectionlinux/http/vcms_upload 2011-11-27 excellent V-CMS PHP File Upload and Executelinux/http/wanem_exec 2012-08-12 excellent WAN Emulator v2.3 Command Executionlinux/http/webcalendar_settings_exec 2012-04-23 excellent WebCalendar 1.2.4 Pre-Auth Remote Code Injectionlinux/http/webid_converter 2011-07-05 excellent WeBid converter.php Remote PHP Code Injectionlinux/http/zen_load_balancer_exec 2012-09-14 excellent ZEN Load Balancer Filelog Command Executionlinux/http/zenoss_showdaemonxmlconfig_exec 2012-07-30 good Zenoss 3 showDaemonXMLConfig Command Executionlinux/ids/snortbopre 2005-10-18 good Snort Back Orifice Pre-Preprocessor Buffer Overflowlinux/imap/imap_uw_lsub 2000-04-16 good UoW IMAP server LSUB Buffer Overflowlinux/local/sock_sendpage 2009-08-13 great Linux Kernel Sendpage Local Privilege Escalationlinux/local/udev_netlink 2009-04-16 great Linux udev Netlink Local Privilege Escalationlinux/madwifi/madwifi_giwscan_cb 2006-12-08 average Madwifi SIOCGIWSCAN Buffer Overflowlinux/misc/accellion_fta_mpipe2 2011-02-07 excellent Accellion File Transfer Appliance MPIPE2 Command Executionlinux/misc/drb_remote_codeexec 2011-03-23 excellent Distributed Ruby Send instance_eval/syscall Code Executionlinux/misc/gld_postfix 2005-04-12 good GLD (Greylisting Daemon) Postfix Buffer Overflowlinux/misc/hp_data_protector_cmd_exec 2011-02-07 excellent HP Data Protector 6 EXEC_CMD Remote Code Executionlinux/misc/hplip_hpssd_exec 2007-10-04 excellent HPLIP hpssd.py From Address Arbitrary Command Executionlinux/misc/ib_inet_connect 2007-10-03 good Borland InterBase INET_connect() Buffer Overflowlinux/misc/ib_jrd8_create_database 2007-10-03 good Borland InterBase jrd8_create_database() Buffer Overflowlinux/misc/ib_open_marker_file 2007-10-03 good Borland InterBase open_marker_file() Buffer Overflowlinux/misc/ib_pwd_db_aliased 2007-10-03 good Borland InterBase PWD_db_aliased() Buffer Overflowlinux/misc/lprng_format_string 2000-09-25 normal LPRng use_syslog Remote Format String Vulnerabilitylinux/misc/netsupport_manager_agent 2011-01-08 average NetSupport Manager Agent Remote Buffer Overflowlinux/misc/novell_edirectory_ncp_bof 2012-12-12 normal Novell eDirectory 8 Buffer Overflowlinux/misc/zabbix_server_exec 2009-09-10 excellent Zabbix Server Arbitrary Command Executionlinux/mysql/mysql_yassl_getname 2010-01-25 good MySQL yaSSL CertDecoder::GetName Buffer Overflowlinux/mysql/mysql_yassl_hello 2008-01-04 good MySQL yaSSL SSL Hello Message Buffer Overflowlinux/pop3/cyrus_pop3d_popsubfolders 2006-05-21 normal Cyrus IMAPD pop3d popsubfolders USER Buffer Overflowlinux/postgres/postgres_payload 2007-06-05 excellent PostgreSQL for Linux Payload Executionlinux/pptp/poptop_negative_read 2003-04-09 great Poptop Negative Read Overflowlinux/proxy/squid_ntlm_authenticate 2004-06-08 great Squid NTLM Authenticate Overflowlinux/samba/chain_reply 2010-06-16 good Samba chain_reply Memory Corruption (Linux x86)linux/samba/lsa_transnames_heap 2007-05-14 good Samba lsa_io_trans_names Heap Overflowlinux/samba/setinfopolicy_heap 2012-04-10 normal Samba SetInformationPolicy AuditEventsInfo Heap Overflowlinux/samba/trans2open 2003-04-07 great Samba trans2open Overflow (Linux x86)linux/ssh/f5_bigip_known_privkey 2012-06-11 excellent F5 BIG-IP SSH Private Key Exposurelinux/ssh/symantec_smg_ssh 2012-08-27 excellent Symantec Messaging Gateway 9.5 Default SSH Password Vulnerabilitylinux/telnet/telnet_encrypt_keyid 2011-12-23 great Linux BSD-derived Telnet Service Encryption Key ID Buffer Overflowmulti/browser/firefox_escape_retval 2009-07-13 normal Firefox 3.5 escape() Return Value Memory Corruptionmulti/browser/firefox_queryinterface 2006-02-02 normal Firefox location.QueryInterface() Code Executionmulti/browser/firefox_xpi_bootstrapped_addon 2007-06-27 excellent Mozilla Firefox Bootstrapped Addon Social Engineering Code Executionmulti/browser/itms_overflow 2009-06-01 great Apple OS X iTunes 8.1.1 ITMS Overflowmulti/browser/java_atomicreferencearray 2012-02-14 excellent Java AtomicReferenceArray Type Violation Vulnerabilitymulti/browser/java_calendar_deserialize 2008-12-03 excellent Sun Java Calendar Deserialization Privilege Escalationmulti/browser/java_getsoundbank_bof 2009-11-04 great Sun Java JRE getSoundbank file:// URI Buffer Overflowmulti/browser/java_jre17_exec 2012-08-26 excellent Java 7 Applet Remote Code Executionmulti/browser/java_jre17_glassfish_averagerangestatisticimpl 2012-10-16 excellent Java Applet AverageRangeStatisticImpl Remote Code Executionmulti/browser/java_jre17_jaxws 2012-10-16 excellent Java Applet JAX-WS Remote Code Executionmulti/browser/java_jre17_jmxbean 2013-01-10 excellent Java Applet JMX Remote Code Executionmulti/browser/java_jre17_jmxbean_2 2013-01-19 excellent Java Applet JMX Remote Code Executionmulti/browser/java_jre17_method_handle 2012-10-16 excellent Java Applet Method Handle Remote Code Executionmulti/browser/java_rhino 2011-10-18 excellent Java Applet Rhino Script Engine Remote Code Executionmulti/browser/java_rmi_connection_impl 2010-03-31 excellent Java RMIConnectionImpl Deserialization Privilege Escalationmulti/browser/java_setdifficm_bof 2009-11-04 great Sun Java JRE AWT setDiffICM Buffer Overflowmulti/browser/java_signed_applet 1997-02-19 excellent Java Signed Applet Social Engineering Code Executionmulti/browser/java_trusted_chain 2010-03-31 excellent Java Statement.invoke() Trusted Method Chain Privilege Escalationmulti/browser/java_verifier_field_access 2012-06-06 excellent Java Applet Field Bytecode Verifier Cache Remote Code Executionmulti/browser/mozilla_compareto 2005-07-13 normal Mozilla Suite/Firefox InstallVersion->compareTo() Code Executionmulti/browser/mozilla_navigatorjava 2006-07-25 normal Mozilla Suite/Firefox Navigator Object Code Executionmulti/browser/opera_configoverwrite 2007-03-05 excellent Opera 9 Configuration Overwritemulti/browser/opera_historysearch 2008-10-23 excellent Opera historysearch XSSmulti/browser/qtjava_pointer 2007-04-23 excellent Apple QTJava toQTPointer() Arbitrary Memory Accessmulti/fileformat/adobe_u3d_meshcont 2009-10-13 good Adobe U3D CLODProgressiveMeshDeclaration Array Overrunmulti/fileformat/maple_maplet 2010-04-26 excellent Maple Maplet File Creation and Command Executionmulti/fileformat/peazip_command_injection 2009-06-05 excellent PeaZip <= 2.6.1 Zip Processing Command Injectionmulti/ftp/wuftpd_site_exec_format 2000-06-22 great WU-FTPD SITE EXEC/INDEX Format String Vulnerabilitymulti/handler manual Generic Payload Handlermulti/http/activecollab_chat 2012-05-30 excellent Active Collab "chat module" <= 2.3.8 Remote PHP Code Injection Exploitmulti/http/ajaxplorer_checkinstall_exec 2010-04-04 excellent AjaXplorer checkInstall.php Remote Command Executionmulti/http/apprain_upload_exec 2012-01-19 excellent appRain CMF Arbitrary PHP File Upload Vulnerabilitymulti/http/auxilium_upload_exec 2012-09-14 excellent Auxilium RateMyPet Arbitrary File Upload Vulnerabilitymulti/http/axis2_deployer 2010-12-30 excellent Axis2 / SAP BusinessObjects Authenticated Code Execution (via SOAP)multi/http/cuteflow_upload_exec 2012-07-27 excellent CuteFlow v2.11.2 Arbitrary File Upload Vulnerabilitymulti/http/eaton_nsm_code_exec 2012-06-26 excellent Network Shutdown Module <= 3.21 (sort_values) Remote PHP Code Injectionmulti/http/extplorer_upload_exec 2012-12-31 excellent eXtplorer v2.1 Arbitrary File Upload Vulnerabilitymulti/http/familycms_less_exec 2011-11-29 excellent Family Connections less.php Remote Command Executionmulti/http/freenas_exec_raw 2010-11-06 great FreeNAS exec_raw.php Arbitrary Command Executionmulti/http/gitorious_graph 2012-01-19 excellent Gitorious Arbitrary Command Executionmulti/http/glassfish_deployer 2011-08-04 excellent Sun/Oracle GlassFish Server Authenticated Code Executionmulti/http/glossword_upload_exec 2013-02-05 excellent Glossword v1.8.8 - 1.8.12 Arbitrary File Upload Vulnerabilitymulti/http/horde_href_backdoor 2012-02-13 excellent Horde 3.3.12 Backdoor Arbitrary PHP Code Executionmulti/http/hp_sitescope_uploadfileshandler 2012-08-29 good HP SiteScope Remote Code Executionmulti/http/jboss_bshdeployer 2010-04-26 excellent JBoss JMX Console Beanshell Deployer WAR Upload and Deploymentmulti/http/jboss_deploymentfilerepository 2010-04-26 excellent JBoss Java Class DeploymentFileRepository WAR Deploymentmulti/http/jboss_invoke_deploy 2007-02-20 excellent JBoss DeploymentFileRepository WAR Deployment (via JMXInvokerServlet)multi/http/jboss_maindeployer 2007-02-20 excellent JBoss JMX Console Deployer Upload and Executemulti/http/jenkins_script_console 2013-01-18 good Jenkins Script-Console Java Executionmulti/http/kordil_edms_upload_exec 2013-02-22 excellent Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload Vulnerabilitymulti/http/lcms_php_exec 2011-03-03 excellent LotusCMS 3.0 eval() Remote Command Executionmulti/http/log1cms_ajax_create_folder 2011-04-11 excellent Log1 CMS writeInfo() PHP Code Injectionmulti/http/manageengine_search_sqli 2012-10-18 excellent ManageEngine Security Manager Plus 5.5 build 5505 SQL Injectionmulti/http/mobilecartly_upload_exec 2012-08-10 excellent MobileCartly 1.0 Arbitrary File Creation Vulnerabilitymulti/http/movabletype_upgrade_exec 2013-01-07 normal Movable Type 4.2x, 4.3x Web Upgrade Remote Code Executionmulti/http/netwin_surgeftp_exec 2012-12-06 good Netwin SurgeFTP Remote Command Executionmulti/http/op5_license 2012-01-05 excellent OP5 license.php Remote Command Executionmulti/http/op5_welcome 2012-01-05 excellent OP5 welcome Remote Command Executionmulti/http/openfire_auth_bypass 2008-11-10 excellent Openfire Admin Console Authentication Bypassmulti/http/php_cgi_arg_injection 2012-05-03 excellent PHP CGI Argument Injectionmulti/http/php_volunteer_upload_exec 2012-05-28 excellent PHP Volunteer Management System v1.0.2 Arbitrary File Upload Vulnerabilitymulti/http/phpldapadmin_query_engine 2011-10-24 excellent phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injectionmulti/http/phpmyadmin_3522_backdoor 2012-09-25 normal phpMyAdmin 3.5.2.2 server_sync.php Backdoormulti/http/phpscheduleit_start_date 2008-10-01 excellent phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injectionmulti/http/phptax_exec 2012-10-08 excellent PhpTax pfilez Parameter Exec Remote Code Injectionmulti/http/plone_popen2 2011-10-04 excellent Plone and Zope XMLTools Remote Command Executionmulti/http/pmwiki_pagelist 2011-11-09 excellent PmWiki <= 2.2.34 pagelist.php Remote PHP Code Injection Exploitmulti/http/qdpm_upload_exec 2012-06-14 excellent qdPM v7 Arbitrary PHP File Upload Vulnerabilitymulti/http/rails_json_yaml_code_exec 2013-01-28 excellent Ruby on Rails JSON Processor YAML Deserialization Code Executionmulti/http/rails_xml_yaml_code_exec 2013-01-07 excellent Ruby on Rails XML Processor YAML Deserialization Code Executionmulti/http/sflog_upload_exec 2012-07-06 excellent Sflog! CMS 1.0 Arbitrary File Upload Vulnerabilitymulti/http/sit_file_upload 2011-11-10 excellent Support Incident Tracker <= 3.65 Remote Command Executionmulti/http/snortreport_exec 2011-09-19 excellent Snortreport nmap.php/nbtscan.php Remote Command Executionmulti/http/sonicwall_gms_upload 2012-01-17 excellent SonicWALL GMS 6 Arbitrary File Uploadmulti/http/splunk_mappy_exec 2011-12-12 excellent Splunk Search Remote Code Executionmulti/http/splunk_upload_app_exec 2012-09-27 good Splunk 5.0 Custom App Remote Code Executionmulti/http/spree_search_exec 2011-10-05 excellent Spreecommerce 0.60.1 Arbitrary Command Executionmulti/http/spree_searchlogic_exec 2011-04-19 excellent Spreecommerce < 0.50.0 Arbitrary Command Executionmulti/http/struts_code_exec 2010-07-13 good Apache Struts < 2.2.0 Remote Command Executionmulti/http/struts_code_exec_exception_delegator 2012-01-06 excellent Apache Struts <= 2.2.1.1 Remote Command Executionmulti/http/sun_jsws_dav_options 2010-01-20 great Sun Java System Web Server WebDAV OPTIONS Buffer Overflowmulti/http/testlink_upload_exec 2012-08-13 excellent TestLink v1.9.3 Arbitrary File Upload Vulnerabilitymulti/http/tomcat_mgr_deploy 2009-11-09 excellent Apache Tomcat Manager Application Deployer Authenticated Code Executionmulti/http/traq_plugin_exec 2011-12-12 excellent Traq admincp/common.php Remote Code Executionmulti/http/vbseo_proc_deutf 2012-01-23 excellent vBSEO <= 3.6.0 proc_deutf() Remote PHP Code Injectionmulti/http/webpagetest_upload_exec 2012-07-13 excellent WebPageTest Arbitrary PHP File Uploadmulti/http/wikka_spam_exec 2011-11-30 excellent WikkaWiki 1.3.2 Spam Logging PHP Injectionmulti/ids/snort_dce_rpc 2007-02-19 good Snort 2 DCE/RPC preprocessor Buffer Overflowmulti/misc/batik_svg_java 2012-05-11 excellent Squiggle 1.7 SVG Browser Java Code Executionmulti/misc/hp_vsa_exec 2011-11-11 excellent HP StorageWorks P4000 Virtual SAN Appliance Command Executionmulti/misc/indesign_server_soap 2012-11-11 excellent Adobe IndesignServer 5.5 SOAP Server Arbitrary Script Executionmulti/misc/java_rmi_server 2011-10-15 excellent Java RMI Server Insecure Default Configuration Java Code Executionmulti/misc/openview_omniback_exec 2001-02-28 excellent HP OpenView OmniBack II Command Executionmulti/misc/pbot_exec 2009-11-02 excellent PHP IRC Bot pbot eval() Remote Code Executionmulti/misc/veritas_netbackup_cmdexec 2004-10-21 excellent VERITAS NetBackup Remote Command Executionmulti/misc/wireshark_lwres_getaddrbyname 2010-01-27 great Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflowmulti/misc/wireshark_lwres_getaddrbyname_loop 2010-01-27 great Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow (loop)multi/misc/zend_java_bridge 2011-03-28 great Zend Server Java Bridge Arbitrary Java Code Executionmulti/ntp/ntp_overflow 2001-04-04 good NTP daemon readvar Buffer Overflowmulti/php/php_unserialize_zval_cookie 2007-03-04 average PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie)multi/realserver/describe 2002-12-20 great RealServer Describe Buffer Overflowmulti/samba/nttrans 2003-04-07 average Samba 2.2.2 - 2.2.6 nttrans Buffer Overflowmulti/samba/usermap_script 2007-05-14 excellent Samba "username map script" Command Executionmulti/svn/svnserve_date 2004-05-19 average Subversion Date Svnservemulti/upnp/libupnp_ssdp_overflow 2013-01-29 normal Portable UPnP SDK unique_service_name() Remote Code Executionmulti/wyse/hagent_untrusted_hsdata 2009-07-10 excellent Wyse Rapport Hagent Fake Hserver Command Executionnetware/smb/lsass_cifs 2007-01-21 average Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflownetware/sunrpc/pkernel_callit 2009-09-30 good NetWare 6.5 SunRPC Portmapper CALLIT Stack Buffer Overflowosx/afp/loginext 2004-05-03 average AppleFileServer LoginExt PathName Overflowosx/arkeia/type77 2005-02-18 average Arkeia Backup Client Type 77 Overflow (Mac OS X)osx/browser/mozilla_mchannel 2011-05-10 normal Mozilla Firefox 3.6.16 mChannel Use-After-Freeosx/browser/safari_file_policy 2011-10-12 normal Apple Safari file:// Arbitrary Code Executionosx/browser/safari_metadata_archive 2006-02-21 excellent Safari Archive Metadata Command Executionosx/browser/software_update 2007-12-17 excellent Apple OS X Software Update Command Executionosx/email/mailapp_image_exec 2006-03-01 manual Mail.app Image Attachment Command Executionosx/ftp/webstar_ftp_user 2004-07-13 average WebSTAR FTP Server USER Overflowosx/http/evocam_webserver 2010-06-01 average MacOS X EvoCam HTTP GET Buffer Overflowosx/mdns/upnp_location 2007-05-25 average Mac OS X mDNSResponder UPnP Location Overflowosx/misc/ufo_ai 2009-10-28 average UFO: Alien Invasion IRC Client Buffer Overflowosx/rtsp/quicktime_rtsp_content_type 2007-11-23 average MacOS X QuickTime RTSP Content-Type Overflowosx/samba/lsa_transnames_heap 2007-05-14 average Samba lsa_io_trans_names Heap Overflowosx/samba/trans2open 2003-04-07 great Samba trans2open Overflow (Mac OS X PPC)solaris/dtspcd/heap_noir 2002-07-10 great Solaris dtspcd Heap Overflowsolaris/lpd/sendmail_exec 2001-08-31 excellent Solaris LPD Command Executionsolaris/samba/lsa_transnames_heap 2007-05-14 average Samba lsa_io_trans_names Heap Overflowsolaris/samba/trans2open 2003-04-07 great Samba trans2open Overflow (Solaris SPARC)solaris/sunrpc/sadmind_adm_build_path 2008-10-14 great Sun Solaris sadmind adm_build_path() Buffer Overflowsolaris/sunrpc/sadmind_exec 2003-09-13 excellent Solaris sadmind Command Executionsolaris/sunrpc/ypupdated_exec 1994-12-12 excellent Solaris ypupdated Command Executionsolaris/telnet/fuser 2007-02-12 excellent Sun Solaris Telnet Remote Authentication Bypass Vulnerabilitysolaris/telnet/ttyprompt 2002-01-18 excellent Solaris in.telnetd TTYPROMPT Buffer Overflowunix/ftp/proftpd_133c_backdoor 2010-12-02 excellent ProFTPD-1.3.3c Backdoor Command Executionunix/ftp/vsftpd_234_backdoor 2011-07-03 excellent VSFTPD v2.3.4 Backdoor Command Executionunix/http/contentkeeperweb_mimencode 2009-02-25 excellent ContentKeeper Web Remote Command Executionunix/http/ctek_skyrouter 2011-09-08 average CTEK SkyRouter 4200 and 4300 Command Executionunix/http/freepbx_callmenum 2012-03-20 manual FreePBX 2.10.0 / 2.9.0 callmenum Remote Code Executionunix/http/lifesize_room 2011-07-13 excellent LifeSize Room Command Injectionunix/irc/unreal_ircd_3281_backdoor 2010-06-12 excellent UnrealIRCD 3.2.8.1 Backdoor Command Executionunix/local/setuid_nmap 2012-07-19 excellent Setuid Nmap Exploitunix/misc/distcc_exec 2002-02-01 excellent DistCC Daemon Command Executionunix/misc/qnx_qconn_exec 2012-09-04 excellent QNX QCONN Remote Command Execution Vulnerabilityunix/misc/spamassassin_exec 2006-06-06 excellent SpamAssassin spamd Remote Command Executionunix/misc/zabbix_agent_exec 2009-09-10 excellent Zabbix Agent net.tcp.listen Command Injectionunix/smtp/clamav_milter_blackhole 2007-08-24 excellent ClamAV Milter Blackhole-Mode Remote Code Executionunix/smtp/exim4_string_format 2010-12-07 excellent Exim4 <= 4.69 string_format Function Heap Buffer Overflowunix/ssh/tectia_passwd_changereq 2012-12-01 excellent Tectia SSH USERAUTH Change Request Password Reset Vulnerabilityunix/webapp/awstats_configdir_exec 2005-01-15 excellent AWStats configdir Remote Command Executionunix/webapp/awstats_migrate_exec 2006-05-04 excellent AWStats migrate Remote Command Executionunix/webapp/awstatstotals_multisort 2008-08-26 excellent AWStats Totals =< v1.14 multisort Remote Command Executionunix/webapp/barracuda_img_exec 2005-09-01 excellent Barracuda IMG.PL Remote Command Executionunix/webapp/base_qry_common 2008-06-14 excellent BASE base_qry_common Remote File Includeunix/webapp/basilic_diff_exec 2012-06-28 excellent Basilic 1.5.14 diff.php Arbitrary Command Executionunix/webapp/cacti_graphimage_exec 2005-01-15 excellent Cacti graph_view.php Remote Command Executionunix/webapp/cakephp_cache_corruption 2010-11-15 excellent CakePHP <= 1.3.5 / 1.2.8 Cache Corruption Code Executionunix/webapp/citrix_access_gateway_exec 2010-12-21 excellent Citrix Access Gateway Command Executionunix/webapp/coppermine_piceditor 2008-01-30 excellent Coppermine Photo Gallery <= 1.4.14 picEditor.php Command Executionunix/webapp/datalife_preview_exec 2013-01-28 excellent DataLife Engine preview.php PHP Code Injectionunix/webapp/dogfood_spell_exec 2009-03-03 excellent Dogfood CRM spell.php Remote Command Executionunix/webapp/egallery_upload_exec 2012-07-08 excellent EGallery PHP File Upload Vulnerabilityunix/webapp/foswiki_maketext 2012-12-03 excellent Foswiki MAKETEXT Remote Command Executionunix/webapp/generic_exec 1993-11-14 excellent Generic Web Application Unix Command Executionunix/webapp/google_proxystylesheet_exec 2005-08-16 excellent Google Appliance ProxyStyleSheet Command Executionunix/webapp/guestbook_ssi_exec 1999-11-05 excellent Matt Wright guestbook.pl Arbitrary Command Executionunix/webapp/hastymail_exec 2011-11-22 excellent Hastymail 2.1.1 RC1 Command Injectionunix/webapp/invision_pboard_unserialize_exec 2012-10-25 excellent Invision IP.Board <= 3.3.4 unserialize() PHP Code Executionunix/webapp/joomla_tinybrowser 2009-07-22 excellent Joomla 1.5.12 TinyBrowser File Upload Code Executionunix/webapp/mambo_cache_lite 2008-06-14 excellent Mambo Cache_Lite Class mosConfig_absolute_path Remote File Includeunix/webapp/mitel_awc_exec 2010-12-12 excellent Mitel Audio and Web Conferencing Command Injectionunix/webapp/mybb_backdoor 2011-10-06 excellent myBB 1.6.4 Backdoor Arbitrary Command Executionunix/webapp/nagios3_history_cgi 2012-12-09 great Nagios3 history.cgi Host Command Executionunix/webapp/nagios3_statuswml_ping 2009-06-22 excellent Nagios3 statuswml.cgi Ping Command Executionunix/webapp/nagios_graph_explorer 2012-11-30 excellent Nagios XI Network Monitor Graph Explorer Component Command Injectionunix/webapp/narcissus_backend_exec 2012-11-14 excellent Narcissus Image Configuration Passthru Vulnerabilityunix/webapp/openemr_upload_exec 2013-02-13 excellent OpenEMR PHP File Upload Vulnerabilityunix/webapp/openview_connectednodes_exec 2005-08-25 excellent HP Openview connectedNodes.ovpl Remote Command Executionunix/webapp/openx_banner_edit 2009-11-24 excellent OpenX banner-edit.php File Upload PHP Code Executionunix/webapp/oracle_vm_agent_utl 2010-10-12 excellent Oracle VM Server Virtual Server Agent Command Injectionunix/webapp/oscommerce_filemanager 2009-08-31 excellent osCommerce 2.2 Arbitrary PHP Code Executionunix/webapp/pajax_remote_exec 2006-03-30 excellent PAJAX Remote Command Executionunix/webapp/php_charts_exec 2013-01-16 excellent PHP-Charts v1.0 PHP Code Execution Vulnerabilityunix/webapp/php_eval 2008-10-13 manual Generic PHP Code Evaluationunix/webapp/php_include 2006-12-17 normal PHP Remote File Include Generic Code Executionunix/webapp/php_vbulletin_template 2005-02-25 excellent vBulletin misc.php Template Name Arbitrary Code Executionunix/webapp/php_wordpress_foxypress 2012-06-05 excellent WordPress plugin Foxypress uploadify.php Arbitrary Code Executionunix/webapp/php_wordpress_lastpost 2005-08-09 excellent WordPress cache_lastpostdate Arbitrary Code Executionunix/webapp/php_xmlrpc_eval 2005-06-29 excellent PHP XML-RPC Arbitrary Code Executionunix/webapp/phpbb_highlight 2004-11-12 excellent phpBB viewtopic.php Arbitrary Code Executionunix/webapp/phpmyadmin_config 2009-03-24 excellent PhpMyAdmin Config File Code Injectionunix/webapp/projectpier_upload_exec 2012-10-08 excellent Project Pier Arbitrary File Upload Vulnerabilityunix/webapp/qtss_parse_xml_exec 2003-02-24 excellent QuickTime Streaming Server parse_xml.cgi Remote Executionunix/webapp/redmine_scm_exec 2010-12-19 excellent Redmine SCM Repository Arbitrary Command Executionunix/webapp/sphpblog_file_upload 2005-08-25 excellent Simple PHP Blog <= 0.4.0 Remote Command Executionunix/webapp/squirrelmail_pgp_plugin 2007-07-09 manual SquirrelMail PGP Plugin command execution (SMTP)unix/webapp/sugarcrm_unserialize_exec 2012-06-23 excellent SugarCRM <= 6.3.1 unserialize() PHP Code Executionunix/webapp/tikiwiki_graph_formula_exec 2007-10-10 excellent TikiWiki tiki-graph_formula Remote PHP Code Executionunix/webapp/tikiwiki_jhot_exec 2006-09-02 excellent TikiWiki jhot Remote Command Executionunix/webapp/tikiwiki_unserialize_exec 2012-07-04 excellent Tiki Wiki <= 8.3 unserialize() PHP Code Executionunix/webapp/trixbox_langchoice 2008-07-09 manual Trixbox langChoice PHP Local File Inclusionunix/webapp/twiki_history 2005-09-14 excellent TWiki History TWikiUsers rev Parameter Command Executionunix/webapp/twiki_maketext 2012-12-15 excellent TWiki MAKETEXT Remote Command Executionunix/webapp/twiki_search 2004-10-01 excellent TWiki Search Function Arbitrary Command Executionunix/webapp/webmin_show_cgi_exec 2012-09-06 excellent Webmin /file/show.cgi Remote Command Executionunix/webapp/wp_advanced_custom_fields_exec 2012-11-14 excellent WordPress Plugin Advanced Custom Fields Remote File Inclusionunix/webapp/wp_asset_manager_upload_exec 2012-05-26 excellent WordPress Asset-Manager PHP File Upload Vulnerabilityunix/webapp/wp_google_document_embedder_exec 2013-01-03 normal WordPress Plugin Google Document Embedder Arbitrary File Disclosureunix/webapp/wp_property_upload_exec 2012-03-26 excellent WordPress WP-Property PHP File Upload Vulnerabilityunix/webapp/xoda_file_upload 2012-08-21 excellent XODA 0.4.5 Arbitrary PHP File Upload Vulnerabilityunix/webapp/zoneminder_packagecontrol_exec 2013-01-22 excellent ZoneMinder Video Server packageControl Command Executionwindows/antivirus/ams_hndlrsvc 2010-07-26 excellent Symantec System Center Alert Management System (hndlrsvc.exe) Arbitrary Command Executionwindows/antivirus/ams_xfr 2009-04-28 excellent Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Executionwindows/antivirus/symantec_iao 2009-04-28 good Symantec Alert Management System Intel Alert Originator Service Buffer Overflowwindows/antivirus/symantec_rtvscan 2006-05-24 good Symantec Remote Management Buffer Overflowwindows/antivirus/trendmicro_serverprotect 2007-02-20 good Trend Micro ServerProtect 5.58 Buffer Overflowwindows/antivirus/trendmicro_serverprotect_createbinding 2007-05-07 good Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflowwindows/antivirus/trendmicro_serverprotect_earthagent 2007-05-07 good Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflowwindows/arkeia/type77 2005-02-18 good Arkeia Backup Client Type 77 Overflow (Win32)windows/backdoor/energizer_duo_payload 2010-03-05 excellent Energizer DUO Trojan Code Executionwindows/backupexec/name_service 2004-12-16 average Veritas Backup Exec Name Service Overflowwindows/backupexec/remote_agent 2005-06-22 great Veritas Backup Exec Windows Remote Agent Overflowwindows/brightstor/ca_arcserve_342 2008-10-09 average Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflowwindows/brightstor/discovery_tcp 2005-02-14 average CA BrightStor Discovery Service TCP Overflowwindows/brightstor/discovery_udp 2004-12-20 average CA BrightStor Discovery Service Stack Buffer Overflowwindows/brightstor/etrust_itm_alert 2008-04-04 average Computer Associates Alert Notification Buffer Overflowwindows/brightstor/hsmserver 2007-09-27 great CA BrightStor HSM Buffer Overflowwindows/brightstor/lgserver 2007-01-31 average CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflowwindows/brightstor/lgserver_multi 2007-06-06 average CA BrightStor ARCserve for Laptops & Desktops LGServer Multiple Commands Buffer Overflowwindows/brightstor/lgserver_rxrlogin 2007-06-06 average CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflowwindows/brightstor/lgserver_rxssetdatagrowthscheduleandfilter 2007-06-06 average CA BrightStor ARCserve for Laptops & Desktops LGServer (rxsSetDataGrowthScheduleAndFilter) Buffer Overflowwindows/brightstor/lgserver_rxsuselicenseini 2007-06-06 average CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflowwindows/brightstor/license_gcr 2005-03-02 average CA BrightStor ARCserve License Service GCR NETWORK Buffer Overflowwindows/brightstor/mediasrv_sunrpc 2007-04-25 average CA BrightStor ArcServe Media Service Stack Buffer Overflowwindows/brightstor/message_engine 2007-01-11 average CA BrightStor ARCserve Message Engine Buffer Overflowwindows/brightstor/message_engine_72 2010-10-04 average CA BrightStor ARCserve Message Engine 0x72 Buffer Overflowwindows/brightstor/message_engine_heap 2006-10-05 average CA BrightStor ARCserve Message Engine Heap Overflowwindows/brightstor/sql_agent 2005-08-02 average CA BrightStor Agent for Microsoft SQL Overflowwindows/brightstor/tape_engine 2006-11-21 average CA BrightStor ARCserve Tape Engine Buffer Overflowwindows/brightstor/tape_engine_8A 2010-10-04 average CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflowwindows/brightstor/universal_agent 2005-04-11 average CA BrightStor Universal Agent Overflowwindows/browser/adobe_cooltype_sing 2010-09-07 great Adobe CoolType SING Table "uniqueName" Stack Buffer Overflowwindows/browser/adobe_flash_mp4_cprt 2012-02-15 normal Adobe Flash Player MP4 'cprt' Overflowwindows/browser/adobe_flash_otf_font 2012-08-09 normal Adobe Flash Player 11.3 Kern Table Parsing Integer Overflowwindows/browser/adobe_flash_rtmp 2012-05-04 normal Adobe Flash Player Object Type Confusionwindows/browser/adobe_flash_sps 2011-08-09 normal Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflowwindows/browser/adobe_flashplayer_arrayindexing 2012-06-21 great Adobe Flash Player AVM Verification Logic Array Indexing Code Executionwindows/browser/adobe_flashplayer_avm 2011-03-15 good Adobe Flash Player AVM Bytecode Verification Vulnerabilitywindows/browser/adobe_flashplayer_flash10o 2011-04-11 normal Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerabilitywindows/browser/adobe_flashplayer_newfunction 2010-06-04 normal Adobe Flash Player "newfunction" Invalid Pointer Usewindows/browser/adobe_flatedecode_predictor02 2009-10-08 good Adobe FlateDecode Stream Predictor 02 Integer Overflowwindows/browser/adobe_geticon 2009-03-24 good Adobe Collab.getIcon() Buffer Overflowwindows/browser/adobe_jbig2decode 2009-02-19 good Adobe JBIG2Decode Heap Corruptionwindows/browser/adobe_media_newplayer 2009-12-14 good Adobe Doc.media.newPlayer Use After Free Vulnerabilitywindows/browser/adobe_shockwave_rcsl_corruption 2010-10-21 normal Adobe Shockwave rcsL Memory Corruptionwindows/browser/adobe_utilprintf 2008-02-08 good Adobe util.printf() Buffer Overflowwindows/browser/aim_goaway 2004-08-09 great AOL Instant Messenger goaway Overflowwindows/browser/aladdin_choosefilepath_bof 2012-04-01 normal Aladdin Knowledge System Ltd ChooseFilePath Buffer Overflowwindows/browser/amaya_bdo 2009-01-28 normal Amaya Browser v11.0 'bdo' Tag Overflowwindows/browser/aol_ampx_convertfile 2009-05-19 normal AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflowwindows/browser/aol_icq_downloadagent 2006-11-06 excellent America Online ICQ ActiveX Control Arbitrary File Download and Executewindows/browser/apple_itunes_playlist 2005-01-11 normal Apple ITunes 4.7 Playlist Buffer Overflowwindows/browser/apple_quicktime_marshaled_punk 2010-08-30 great Apple QuickTime 7.6.7 _Marshaled_pUnk Code Executionwindows/browser/apple_quicktime_mime_type 2012-11-07 normal Apple QuickTime 7.7.2 MIME Type Buffer Overflowwindows/browser/apple_quicktime_rtsp 2007-01-01 normal Apple QuickTime 7.1.3 RTSP URI Buffer Overflowwindows/browser/apple_quicktime_smil_debug 2010-08-12 good Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflowwindows/browser/apple_quicktime_texml_font_table 2012-11-07 normal Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflowwindows/browser/ask_shortformat 2007-09-24 normal Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflowwindows/browser/asus_net4switch_ipswcom 2012-02-17 normal ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflowwindows/browser/athocgov_completeinstallation 2008-02-15 normal AtHocGov IWSAlerts ActiveX Control Buffer Overflowwindows/browser/autodesk_idrop 2009-04-02 normal Autodesk IDrop ActiveX Control Heap Memory Corruptionwindows/browser/aventail_epi_activex 2010-08-19 normal SonicWALL Aventail epi.dll AuthCredential Format Stringwindows/browser/awingsoft_web3d_bof 2009-07-10 average AwingSoft Winds3D Player SceneURL Buffer Overflowwindows/browser/awingsoft_winds3d_sceneurl 2009-11-14 excellent AwingSoft Winds3D Player 3.5 SceneURL Download and Executewindows/browser/baofeng_storm_onbeforevideodownload 2009-04-30 normal BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflowwindows/browser/barcode_ax49 2007-06-22 normal RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflowwindows/browser/blackice_downloadimagefileurl 2008-06-05 excellent Black Ice Cover Page ActiveX Control Arbitrary File Downloadwindows/browser/c6_messenger_downloaderactivex 2008-06-03 excellent Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Executewindows/browser/ca_brightstor_addcolumn 2008-03-16 normal CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflowwindows/browser/chilkat_crypt_writefile 2008-11-03 excellent Chilkat Crypt ActiveX WriteFile Unsafe Methodwindows/browser/cisco_anyconnect_exec 2011-06-01 excellent Cisco AnyConnect VPN Client ActiveX URL Property Download and Executewindows/browser/cisco_playerpt_setsource 2012-03-22 normal Cisco Linksys PlayerPT ActiveX Control Buffer Overflowwindows/browser/cisco_playerpt_setsource_surl 2012-07-17 normal Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflowwindows/browser/citrix_gateway_actx 2011-07-14 normal Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerabilitywindows/browser/clear_quest_cqole 2012-05-19 normal IBM Rational ClearQuest CQOle Remote Code Executionwindows/browser/communicrypt_mail_activex 2010-05-19 great CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflowwindows/browser/creative_software_cachefolder 2008-05-28 normal Creative Software AutoUpdate Engine ActiveX Control Buffer Overflowwindows/browser/crystal_reports_printcontrol 2010-12-14 normal Crystal Reports CrystalPrintControl ActiveX ServerResourceVersion Property Overflowwindows/browser/dell_webcam_crazytalk 2012-03-19 normal Dell Webcam CrazyTalk ActiveX BackImage Vulnerabilitywindows/browser/dxstudio_player_exec 2009-06-09 excellent Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Executionwindows/browser/ea_checkrequirements 2007-10-08 normal Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflowwindows/browser/ebook_flipviewer_fviewerloading 2007-06-06 normal FlipViewer FViewerLoading ActiveX Control Buffer Overflowwindows/browser/enjoysapgui_comp_download 2009-04-15 excellent EnjoySAP SAP GUI ActiveX Control Arbitrary File Downloadwindows/browser/enjoysapgui_preparetoposthtml 2007-07-05 normal EnjoySAP SAP GUI ActiveX Control Buffer Overflowwindows/browser/facebook_extractiptc 2008-01-31 normal Facebook Photo Uploader 4 ActiveX Control Buffer Overflowwindows/browser/foxit_reader_plugin_url_bof 2013-01-07 normal Foxit Reader Plugin URL Processing Buffer Overflowwindows/browser/gom_openurl 2007-10-27 normal GOM Player ActiveX Control Buffer Overflowwindows/browser/greendam_url 2009-06-11 normal Green Dam URL Processing Buffer Overflowwindows/browser/honeywell_hscremotedeploy_exec 2013-02-22 excellent Honeywell HSC Remote Deployer ActiveX Remote Code Executionwindows/browser/honeywell_tema_exec 2011-10-20 excellent Honeywell Tema Remote Installer ActiveX Remote Code Executionwindows/browser/hp_alm_xgo_setshapenodetype_exec 2012-08-29 normal HP Application Lifecycle Management XGO.ocx ActiveX SetShapeNodeType() Remote Code Executionwindows/browser/hp_easy_printer_care_xmlcachemgr 2012-01-11 great HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Executionwindows/browser/hp_easy_printer_care_xmlsimpleaccessor 2011-08-16 great HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Executionwindows/browser/hp_loadrunner_addfile 2008-01-25 normal Persits XUpload ActiveX AddFile Buffer Overflowwindows/browser/hp_loadrunner_addfolder 2007-12-25 good HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflowwindows/browser/hpmqc_progcolor 2007-04-04 normal HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflowwindows/browser/hyleos_chemviewx_activex 2010-02-10 good Hyleos ChemView ActiveX Control Stack Buffer Overflowwindows/browser/ibm_tivoli_pme_activex_bof 2012-03-01 normal IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflowwindows/browser/ibmegath_getxmlvalue 2009-03-24 normal IBM Access Support ActiveX Control Buffer Overflowwindows/browser/ibmlotusdomino_dwa_uploadmodule 2007-12-20 normal IBM Lotus Domino Web Access Upload Module Buffer Overflowwindows/browser/ie_cbutton_uaf 2012-12-27 normal Microsoft Internet Explorer CButton Object Use-After-Free Vulnerabilitywindows/browser/ie_createobject 2006-04-11 excellent Internet Explorer COM CreateObject Code Executionwindows/browser/ie_execcommand_uaf 2012-09-14 good MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability windows/browser/ie_iscomponentinstalled 2006-02-24 normal Internet Explorer isComponentInstalled Overflowwindows/browser/ie_unsafe_scripting 2010-09-20 excellent Internet Explorer Unsafe Scripting Misconfigurationwindows/browser/imgeviewer_tifmergemultifiles 2010-03-03 normal Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Controlwindows/browser/indusoft_issymbol_internationalseparator 2012-04-28 normal InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflowwindows/browser/inotes_dwa85w_bof 2012-06-01 normal IBM Lotus iNotes dwa85W ActiveX Buffer Overflowwindows/browser/intrust_annotatex_add 2012-03-28 average Quest InTrust Annotation Objects Uninitialized Pointerwindows/browser/java_basicservice_impl 2010-10-12 excellent Sun Java Web Start BasicServiceImpl Code Executionwindows/browser/java_codebase_trust 2011-02-15 excellent Sun Java Applet2ClassLoader Remote Code Executionwindows/browser/java_docbase_bof 2010-10-12 great Sun Java Runtime New Plugin docbase Buffer Overflowwindows/browser/java_mixer_sequencer 2010-03-30 great Java MixerSequencer Object GM_Song Structure Handling Vulnerabilitywindows/browser/java_ws_arginject_altjvm 2010-04-09 excellent Sun Java Web Start Plugin Command Line Argument Injectionwindows/browser/java_ws_vmargs 2012-02-14 excellent Sun Java Web Start Plugin Command Line Argument Injectionwindows/browser/juniper_sslvpn_ive_setupdll 2006-04-26 normal Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflowwindows/browser/kazaa_altnet_heap 2007-10-03 normal Kazaa Altnet Download Manager ActiveX Control Buffer Overflowwindows/browser/keyhelp_launchtripane_exec 2012-06-26 excellent KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerabilitywindows/browser/logitechvideocall_start 2007-05-31 normal Logitech VideoCall ActiveX Control Buffer Overflowwindows/browser/lpviewer_url 2008-10-06 normal iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflowwindows/browser/macrovision_downloadandexecute 2007-10-31 normal Macrovision InstallShield Update Service Buffer Overflowwindows/browser/macrovision_unsafe 2007-10-20 excellent Macrovision InstallShield Update Service ActiveX Unsafe Methodwindows/browser/maxthon_history_xcs 2012-11-26 excellent Maxthon3 about:history XCS Trusted Zone Code Executionwindows/browser/mcafee_mcsubmgr_vsprintf 2006-08-01 normal McAfee Subscription Manager Stack Buffer Overflowwindows/browser/mcafee_mvt_exec 2012-04-30 excellent McAfee Virtual Technician MVTControl 6.3.0.1911 GetObject Vulnerabilitywindows/browser/mcafeevisualtrace_tracetarget 2007-07-07 normal McAfee Visual Trace ActiveX Control Buffer Overflowwindows/browser/mirc_irc_url 2003-10-13 normal mIRC IRC URL Buffer Overflowwindows/browser/mozilla_attribchildremoved 2011-12-06 average Firefox 8/9 AttributeChildRemoved() Use-After-Freewindows/browser/mozilla_interleaved_write 2010-10-25 normal Mozilla Firefox Interleaved document.write/appendChild Memory Corruptionwindows/browser/mozilla_mchannel 2011-05-10 normal Mozilla Firefox 3.6.16 mChannel Use-After-Free Vulnerabilitywindows/browser/mozilla_nssvgvalue 2011-12-06 average Firefox 7/8 (<= 8.0.1) nsSVGValue Out-of-Bounds Access Vulnerabilitywindows/browser/mozilla_nstreerange 2011-02-02 normal Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerabilitywindows/browser/mozilla_reduceright 2011-06-21 normal Mozilla Firefox Array.reduceRight() Integer Overflowwindows/browser/ms03_020_ie_objecttype 2003-06-04 normal MS03-020 Internet Explorer Object Typewindows/browser/ms05_054_onload 2005-11-21 normal MS05-054 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Executionwindows/browser/ms06_001_wmf_setabortproc 2005-12-27 great Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Executionwindows/browser/ms06_013_createtextrange 2006-03-19 normal Internet Explorer createTextRange() Code Executionwindows/browser/ms06_055_vml_method 2006-09-19 normal Internet Explorer VML Fill Method Code Executionwindows/browser/ms06_057_webview_setslice 2006-07-17 normal Internet Explorer WebViewFolderIcon setSlice() Overflowwindows/browser/ms06_067_keyframe 2006-11-14 normal Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerabilitywindows/browser/ms06_071_xml_core 2006-10-10 normal Internet Explorer XML Core Services HTTP Request Handlingwindows/browser/ms07_017_ani_loadimage_chunksize 2007-03-28 great Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)windows/browser/ms08_041_snapshotviewer 2008-07-07 excellent Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Downloadwindows/browser/ms08_053_mediaencoder 2008-09-09 normal Windows Media Encoder 9 wmex.dll ActiveX Buffer Overflowwindows/browser/ms08_070_visual_studio_msmask 2008-08-13 normal Microsoft Visual Studio Mdmask32.ocx ActiveX Buffer Overflowwindows/browser/ms08_078_xml_corruption 2008-12-07 normal Internet Explorer Data Binding Memory Corruptionwindows/browser/ms09_002_memory_corruption 2009-02-10 normal Internet Explorer 7 CFunctionPointer Uninitialized Memory Corruptionwindows/browser/ms09_043_owc_htmlurl 2009-08-11 normal Microsoft OWC Spreadsheet HTMLURL Buffer Overflowwindows/browser/ms09_043_owc_msdso 2009-07-13 normal Microsoft OWC Spreadsheet msDataSourceObject Memory Corruptionwindows/browser/ms09_072_style_object 2009-11-20 normal Internet Explorer Style getElementsByTagName Memory Corruptionwindows/browser/ms10_002_aurora 2010-01-14 normal Internet Explorer "Aurora" Memory Corruptionwindows/browser/ms10_002_ie_object 2010-01-21 normal MS10-002 Internet Explorer Object Memory Use-After-Freewindows/browser/ms10_018_ie_behaviors 2010-03-09 good Internet Explorer DHTML Behaviors Use After Freewindows/browser/ms10_018_ie_tabular_activex 2010-03-09 good Internet Explorer Tabular Data Control ActiveX Memory Corruptionwindows/browser/ms10_022_ie_vbscript_winhlp32 2010-02-26 great Internet Explorer Winhlp32.exe MsgBox Code Executionwindows/browser/ms10_026_avi_nsamplespersec 2010-04-13 normal MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflowwindows/browser/ms10_042_helpctr_xss_cmd_exec 2010-06-09 excellent Microsoft Help Center XSS and Command Executionwindows/browser/ms10_046_shortcut_icon_dllloader 2010-07-16 excellent Microsoft Windows Shell LNK Code Executionwindows/browser/ms10_090_ie_css_clip 2010-11-03 good Internet Explorer CSS SetUserClip Memory Corruptionwindows/browser/ms11_003_ie_css_import 2010-11-29 good Internet Explorer CSS Recursive Import Use After Freewindows/browser/ms11_050_mshtml_cobjectelement 2011-06-16 normal MS11-050 IE mshtml!CObjectElement Use After Freewindows/browser/ms11_081_option 2012-10-11 normal Microsoft Internet Explorer Option Element Use-After-Freewindows/browser/ms11_093_ole32 2011-12-13 normal MS11-093 Microsoft Windows OLE Object File Handling Remote Code Executionwindows/browser/ms12_004_midi 2012-01-10 normal MS12-004 midiOutPlayNextPolyEvent Heap Overflowwindows/browser/ms12_037_ie_colspan 2012-06-12 normal Microsoft Internet Explorer Fixed Table Col Span Heap Overflowwindows/browser/ms12_037_same_id 2012-06-12 normal MS12-037 Internet Explorer Same ID Property Deleted Object Handling Memory Corruptionwindows/browser/ms13_009_ie_slayoutrun_uaf 2013-02-13 normal MS13-009 Microsoft Internet Explorer SLayoutRun Use-After-Freewindows/browser/msvidctl_mpeg2 2009-07-05 normal Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruptionwindows/browser/mswhale_checkforupdates 2009-04-15 normal Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflowwindows/browser/msxml_get_definition_code_exec 2012-06-12 good MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruptionwindows/browser/nctaudiofile2_setformatlikesample 2007-01-24 normal NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflowwindows/browser/nis2004_antispam 2004-03-19 normal Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflowwindows/browser/nis2004_get 2007-05-16 normal Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflowwindows/browser/notes_handler_cmdinject 2012-06-18 excellent IBM Lotus Notes Client URL Handler Command Injectionwindows/browser/novell_groupwise_gwcls1_actvx 2013-01-30 normal Novell GroupWise Client gwcls1.dll ActiveX Remote Code Executionwindows/browser/novelliprint_callbackurl 2010-08-20 normal Novell iPrint Client ActiveX Control call-back-url Buffer Overflowwindows/browser/novelliprint_datetime 2009-12-08 great Novell iPrint Client ActiveX Control Date/Time Buffer Overflowwindows/browser/novelliprint_executerequest 2008-02-22 normal Novell iPrint Client ActiveX Control ExecuteRequest Buffer Overflowwindows/browser/novelliprint_executerequest_dbg 2010-08-04 normal Novell iPrint Client ActiveX Control ExecuteRequest debug Buffer Overflowwindows/browser/novelliprint_getdriversettings 2008-06-16 normal Novell iPrint Client ActiveX Control Buffer Overflowwindows/browser/novelliprint_getdriversettings_2 2010-11-15 normal Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflowwindows/browser/novelliprint_target_frame 2009-12-08 great Novell iPrint Client ActiveX Control target-frame Buffer Overflowwindows/browser/ntr_activex_check_bof 2012-01-11 normal NTR ActiveX Control Check() Method Buffer Overflowwindows/browser/ntr_activex_stopmodule 2012-01-11 normal NTR ActiveX Control StopModule() Remote Code Executionwindows/browser/oracle_autovue_setmarkupmode 2012-04-18 normal Oracle AutoVue ActiveX Control SetMarkupMode Buffer Overflowwindows/browser/oracle_dc_submittoexpress 2009-08-28 normal Oracle Document Capture 10g ActiveX Control Buffer Overflowwindows/browser/orbit_connecting 2009-02-03 normal Orbit Downloader Connecting Log Creation Buffer Overflowwindows/browser/ovftool_format_string 2012-11-08 normal VMWare OVF Tools Format String Vulnerabilitywindows/browser/pcvue_func 2011-10-05 average PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerabilitywindows/browser/persits_xupload_traversal 2009-09-29 excellent Persits XUpload ActiveX MakeHttpRequest Directory Traversalwindows/browser/quickr_qp2_bof 2012-05-23 normal IBM Lotus QuickR qp2 ActiveX Buffer Overflowwindows/browser/real_arcade_installerdlg 2011-04-03 normal Real Networks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Executionwindows/browser/realplayer_cdda_uri 2010-11-15 normal RealNetworks RealPlayer CDDA URI Initialization Vulnerabilitywindows/browser/realplayer_console 2008-03-08 normal RealPlayer rmoc3260.dll ActiveX Control Heap Corruptionwindows/browser/realplayer_import 2007-10-18 normal RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflowwindows/browser/realplayer_qcp 2011-08-16 average RealNetworks Realplayer QCP Parsing Heap Overflowwindows/browser/realplayer_smil 2005-03-01 normal RealNetworks RealPlayer SMIL Buffer Overflowwindows/browser/roxio_cineplayer 2007-04-11 normal Roxio CinePlayer ActiveX Control Buffer Overflowwindows/browser/safari_xslt_output 2011-07-20 excellent Apple Safari Webkit libxslt Arbitrary File Creationwindows/browser/samsung_neti_wiewer_backuptoavi_bof 2012-04-21 normal Samsung NET-i Viewer Multiple ActiveX BackupToAvi() Remote Overflowwindows/browser/sapgui_saveviewtosessionfile 2009-03-31 normal SAP AG SAPgui EAI WebViewer3D Buffer Overflowwindows/browser/softartisans_getdrivename 2008-08-25 normal SoftArtisans XFile FileManager ActiveX Control Buffer Overflowwindows/browser/sonicwall_addrouteentry 2007-11-01 normal SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflowwindows/browser/symantec_altirisdeployment_downloadandinstall 2009-09-09 excellent Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Executewindows/browser/symantec_altirisdeployment_runcmd 2009-11-04 normal Symantec Altiris Deployment Solution ActiveX Control Buffer Overflowwindows/browser/symantec_appstream_unsafe 2009-01-15 excellent Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Executewindows/browser/symantec_backupexec_pvcalendar 2008-02-28 normal Symantec BackupExec Calendar Control Buffer Overflowwindows/browser/symantec_consoleutilities_browseandsavefile 2009-11-02 normal Symantec ConsoleUtilities ActiveX Control Buffer Overflowwindows/browser/systemrequirementslab_unsafe 2008-10-16 excellent Husdawg, LLC. System Requirements Lab ActiveX Unsafe Methodwindows/browser/teechart_pro 2011-08-11 normal TeeChart Professional ActiveX Control <= 2010.0.0.3 Trusted Integer Dereferencewindows/browser/tom_sawyer_tsgetx71ex552 2011-05-03 normal Tom Sawyer Software GET Extension Factory Remote Code Executionwindows/browser/trendmicro_extsetowner 2010-08-25 normal Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Executionwindows/browser/trendmicro_officescan 2007-02-12 normal Trend Micro OfficeScan Client ActiveX Control Buffer Overflowwindows/browser/tumbleweed_filetransfer 2008-04-07 great Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflowwindows/browser/ubisoft_uplay_cmd_exec 2012-07-29 normal Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Executionwindows/browser/ultramjcam_openfiledig_bof 2012-03-28 normal TRENDnet SecurView Internet Camera UltraMJCam OpenFileDlg Buffer Overflowwindows/browser/ultraoffice_httpupload 2008-08-27 good Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflowwindows/browser/verypdf_pdfview 2008-06-16 normal VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflowwindows/browser/viscom_movieplayer_drawtext 2010-01-12 normal Viscom Software Movie Player Pro SDK ActiveX 6.8windows/browser/vlc_amv 2011-03-23 good VLC AMV Dangling Pointer Vulnerabilitywindows/browser/vlc_mms_bof 2012-03-15 normal VLC MMS Stream Handling Buffer Overflowwindows/browser/webdav_dll_hijacker 2010-08-18 manual WebDAV Application DLL Hijackerwindows/browser/webex_ucf_newobject 2008-08-06 good WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflowwindows/browser/winamp_playlist_unc 2006-01-29 great Winamp Playlist UNC Path Computer Name Overflowwindows/browser/winamp_ultravox 2008-01-18 normal Winamp Ultravox Streaming Metadata (in_mp3.dll) Buffer Overflowwindows/browser/windvd7_applicationtype 2007-03-20 normal WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflowwindows/browser/winzip_fileview 2007-11-02 normal WinZip FileView (WZFILEVIEW.FileViewCtrl.61) ActiveX Buffer Overflowwindows/browser/wmi_admintools 2010-12-21 great Microsoft WMI Administration Tools ActiveX Buffer Overflowwindows/browser/xmplay_asx 2006-11-21 good XMPlay 3.3.0.4 (ASX Filename) Buffer Overflowwindows/browser/yahoomessenger_fvcom 2007-08-30 normal Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflowwindows/browser/yahoomessenger_server 2007-06-05 good Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflowwindows/browser/zenturiprogramchecker_unsafe 2007-05-29 excellent Zenturi ProgramChecker ActiveX Control Arbitrary File Downloadwindows/browser/zenworks_helplauncher_exec 2011-10-19 normal AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Executionwindows/dcerpc/ms03_026_dcom 2003-07-16 great Microsoft RPC DCOM Interface Overflowwindows/dcerpc/ms05_017_msmq 2005-04-12 good Microsoft Message Queueing Service Path Overflowwindows/dcerpc/ms07_029_msdns_zonename 2007-04-12 great Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)windows/dcerpc/ms07_065_msmq 2007-12-11 good Microsoft Message Queueing Service DNS Name Path Overflowwindows/driver/broadcom_wifi_ssid 2006-11-11 low Broadcom Wireless Driver Probe Response SSID Overflowwindows/driver/dlink_wifi_rates 2006-11-13 low D-Link DWL-G132 Wireless Driver Beacon Rates Overflowwindows/driver/netgear_wg111_beacon 2006-11-16 low NetGear WG111v2 Wireless Driver Long Beacon Overflowwindows/email/ms07_017_ani_loadimage_chunksize 2007-03-28 great Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)windows/email/ms10_045_outlook_ref_only 2010-06-01 excellent Outlook ATTACH_BY_REF_ONLY File Executionwindows/email/ms10_045_outlook_ref_resolve 2010-06-01 excellent Outlook ATTACH_BY_REF_RESOLVE File Executionwindows/emc/alphastor_agent 2008-05-27 great EMC AlphaStor Agent Buffer Overflowwindows/emc/networker_format_string 2012-08-29 normal EMC Networker Format Stringwindows/fileformat/a-pdf_wav_to_mp3 2010-08-17 normal A-PDF WAV to MP3 v1.0.0 Buffer Overflowwindows/fileformat/acdsee_fotoslate_string 2011-09-12 good ACDSee FotoSlate PLP File id Parameter Overflowwindows/fileformat/acdsee_xpm 2007-11-23 good ACDSee XPM File Section Buffer Overflowwindows/fileformat/actfax_import_users_bof 2012-08-28 normal ActiveFax (ActFax) 4.3 Client Importer Buffer Overflowwindows/fileformat/activepdf_webgrabber 2008-08-26 low activePDF WebGrabber ActiveX Control Buffer Overflowwindows/fileformat/adobe_collectemailinfo 2008-02-08 good Adobe Collab.collectEmailInfo() Buffer Overflowwindows/fileformat/adobe_cooltype_sing 2010-09-07 great Adobe CoolType SING Table "uniqueName" Stack Buffer Overflowwindows/fileformat/adobe_flashplayer_button 2010-10-28 normal Adobe Flash Player "Button" Remote Code Executionwindows/fileformat/adobe_flashplayer_newfunction 2010-06-04 normal Adobe Flash Player "newfunction" Invalid Pointer Usewindows/fileformat/adobe_flatedecode_predictor02 2009-10-08 good Adobe FlateDecode Stream Predictor 02 Integer Overflowwindows/fileformat/adobe_geticon 2009-03-24 good Adobe Collab.getIcon() Buffer Overflowwindows/fileformat/adobe_illustrator_v14_eps 2009-12-03 great Adobe Illustrator CS4 v14.0.0windows/fileformat/adobe_jbig2decode 2009-02-19 good Adobe JBIG2Decode Memory Corruptionwindows/fileformat/adobe_libtiff 2010-02-16 good Adobe Acrobat Bundled LibTIFF Integer Overflowwindows/fileformat/adobe_media_newplayer 2009-12-14 good Adobe Doc.media.newPlayer Use After Free Vulnerabilitywindows/fileformat/adobe_pdf_embedded_exe 2010-03-29 excellent Adobe PDF Embedded EXE Social Engineeringwindows/fileformat/adobe_pdf_embedded_exe_nojs 2010-03-29 excellent Adobe PDF Escape EXE Social Engineering (No JavaScript)windows/fileformat/adobe_reader_u3d 2011-12-06 average Adobe Reader U3D Memory Corruption Vulnerabilitywindows/fileformat/adobe_u3d_meshdecl 2009-10-13 good Adobe U3D CLODProgressiveMeshDeclaration Array Overrunwindows/fileformat/adobe_utilprintf 2008-02-08 good Adobe util.printf() Buffer Overflowwindows/fileformat/altap_salamander_pdb 2007-06-19 good Altap Salamander 2.5 PE Viewer Buffer Overflowwindows/fileformat/aol_desktop_linktag 2011-01-31 normal AOL Desktop 9.6 RTX Buffer Overflowwindows/fileformat/aol_phobos_bof 2010-01-20 average AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflowwindows/fileformat/apple_quicktime_pnsize 2011-08-08 good Apple QuickTime PICT PnSize Buffer Overflowwindows/fileformat/apple_quicktime_texml 2012-05-15 normal Apple QuickTime TeXML Style Element Stack Buffer Overflowwindows/fileformat/audio_wkstn_pls 2009-12-08 good Audio Workstation 6.4.2.4.3 pls Buffer Overflowwindows/fileformat/audiotran_pls 2010-01-09 good Audiotran 1.4.1 (PLS File) Stack Buffer Overflowwindows/fileformat/aviosoft_plf_buf 2011-11-09 good Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflowwindows/fileformat/bacnet_csv 2010-09-16 good BACnet OPC Client Buffer Overflowwindows/fileformat/blazedvd_hdtv_bof 2012-04-03 normal BlazeVideo HDTV Player Pro v6.6 Filename Handling Vulnerabilitywindows/fileformat/blazedvd_plf 2009-08-03 good BlazeDVD 5.1 PLF Buffer Overflowwindows/fileformat/bsplayer_m3u 2010-01-07 normal BS.Player 2.57 Buffer Overflow (Unicode SEH)windows/fileformat/ca_cab 2007-06-05 good CA Antivirus Engine CAB Buffer Overflowwindows/fileformat/cain_abel_4918_rdp 2008-11-30 good Cain & Abel <= v4.9.24 RDP Buffer Overflowwindows/fileformat/ccmplayer_m3u_bof 2011-11-30 good CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflowwindows/fileformat/csound_getnum_bof 2012-02-23 normal Csound hetro File Handling Stack Buffer Overflowwindows/fileformat/cutezip_bof 2011-02-12 normal GlobalSCAPE CuteZIP Stack Buffer Overflowwindows/fileformat/cyberlink_p2g_bof 2011-09-12 great CyberLink Power2Go name attribute (p2g) Stack Buffer Overflow Exploitwindows/fileformat/cytel_studio_cy3 2011-10-02 good Cytel Studio 9.0 (CY3 File) Stack Buffer Overflowwindows/fileformat/deepburner_path 2006-12-19 great AstonSoft DeepBurner (DBR File) Path Buffer Overflowwindows/fileformat/destinymediaplayer16 2009-01-03 good Destiny Media Player 1.61 PLS M3U Buffer Overflowwindows/fileformat/digital_music_pad_pls 2010-09-17 normal Digital Music Pad Version 8.2.3.3.4 Stack Buffer Overflowwindows/fileformat/djstudio_pls_bof 2009-12-30 normal DJ Studio Pro 5.1 .pls Stack Buffer Overflowwindows/fileformat/djvu_imageurl 2008-10-30 low DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflowwindows/fileformat/dvdx_plf_bof 2007-06-02 normal DVD X Player 5.5 .plf PlayList Buffer Overflowwindows/fileformat/emc_appextender_keyworks 2009-09-29 average EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflowwindows/fileformat/esignal_styletemplate_bof 2011-09-06 normal eSignal and eSignal Pro <= 10.6.2425.1208 file parsing buffer overflow in QUOwindows/fileformat/etrust_pestscan 2009-11-02 average CA eTrust PestPatrol ActiveX Control Buffer Overflowwindows/fileformat/ezip_wizard_bof 2009-03-09 good eZip Wizard 3.0 Stack Buffer Overflowwindows/fileformat/fatplayer_wav 2010-10-18 normal Fat Player Media Player 0.6b0 Buffer Overflowwindows/fileformat/fdm_torrent 2009-02-02 good Free Download Manager Torrent Parsing Buffer Overflowwindows/fileformat/feeddemon_opml 2009-02-09 great FeedDemon <= 3.1.0.12 Stack Buffer Overflowwindows/fileformat/foxit_reader_filewrite 2011-03-05 normal Foxit PDF Reader 4.2 Javascript File Writewindows/fileformat/foxit_reader_launch 2009-03-09 good Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflowwindows/fileformat/foxit_title_bof 2010-11-13 great Foxit PDF Reader v4.1.1 Title Stack Buffer Overflowwindows/fileformat/free_mp3_ripper_wav 2011-08-27 great Free MP3 CD Ripper 1.1 WAV File Stack Buffer Overflowwindows/fileformat/galan_fileformat_bof 2009-12-07 normal gAlan 0.2.1 Buffer Overflowwindows/fileformat/gsm_sim 2010-07-07 normal GSM SIM Editor 5.15 Buffer Overflowwindows/fileformat/gta_samp 2011-09-18 normal GTA SA-MP server.cfg Buffer Overflowwindows/fileformat/hhw_hhp_compiledfile_bof 2006-02-06 good HTML Help Workshop 4.74 (hhp Project File) Buffer Overflowwindows/fileformat/hhw_hhp_contentfile_bof 2006-02-06 good HTML Help Workshop 4.74 (hhp Project File) Buffer Overflowwindows/fileformat/hhw_hhp_indexfile_bof 2009-01-17 good HTML Help Workshop 4.74 (hhp Project File) Buffer Overflowwindows/fileformat/ht_mp3player_ht3_bof 2009-06-29 good HT-MP3Player 1.0 HT3 File Parsing Buffer Overflowwindows/fileformat/ibm_pcm_ws 2012-02-28 great IBM Personal Communications iSeries Access WorkStation 5.9 Profilewindows/fileformat/ideal_migration_ipj 2009-12-05 great PointDev IDEAL Migration Buffer Overflowwindows/fileformat/irfanview_jpeg2000_bof 2012-01-16 normal Irfanview JPEG2000 <= v4.3.2.0 jp2 Stack Buffer Overflowwindows/fileformat/ispvm_xcf_ispxcf 2012-05-16 normal Lattice Semiconductor ispVM System XCF File Handling Overflowwindows/fileformat/lattice_pac_bof 2012-05-16 normal Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflowwindows/fileformat/lotusnotes_lzh 2011-05-24 good Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)windows/fileformat/magix_musikmaker_16_mmm 2011-04-26 good Magix Musik Maker 16 .mmm Stack Buffer Overflowwindows/fileformat/mcafee_hercules_deletesnapshot 2008-08-04 low McAfee Remediation Client ActiveX Control Buffer Overflowwindows/fileformat/mcafee_showreport_exec 2012-01-12 normal McAfee SaaS MyCioScan ShowReport Remote Command Executionwindows/fileformat/mediajukebox 2009-07-01 normal Media Jukebox 8.0.400 Buffer Overflow (SEH)windows/fileformat/microp_mppl 2010-08-23 great MicroP 0.1.1.1600 (MPPL File) Stack Buffer Overflowwindows/fileformat/millenium_mp3_pls 2009-07-30 great Millenium MP3 Studio 2.0 (PLS File) Stack Buffer Overflowwindows/fileformat/mini_stream_pls_bof 2010-07-16 great Mini-Stream RM-MP3 Converter v3.1.2.1 PLS File Stack Buffer Overflowwindows/fileformat/mjm_coreplayer2011_s3m 2011-04-30 good MJM Core Player 2011 .s3m Stack Buffer Overflowwindows/fileformat/mjm_quickplayer_s3m 2011-04-30 good MJM QuickPlayer 1.00 beta 60a / QuickPlayer 2010 .s3m Stack Buffer Overflowwindows/fileformat/moxa_mediadbplayback 2010-10-19 average MOXA MediaDBPlayback ActiveX Control Buffer Overflowwindows/fileformat/mplayer_sami_bof 2011-05-19 normal MPlayer SAMI Subtitle File Buffer Overflowwindows/fileformat/ms09_067_excel_featheader 2009-11-10 good Microsoft Excel Malformed FEATHEADER Record Vulnerabilitywindows/fileformat/ms10_004_textbytesatom 2010-02-09 good Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflowwindows/fileformat/ms10_038_excel_obj_bof 2010-06-08 normal MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflowwindows/fileformat/ms10_087_rtf_pfragments_bof 2010-11-09 great Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)windows/fileformat/ms11_006_createsizeddibsection 2010-12-15 great Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflowwindows/fileformat/ms11_021_xlb_bof 2011-08-09 normal MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflowwindows/fileformat/ms12_005 2012-01-10 excellent MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerabilitywindows/fileformat/ms12_027_mscomctl_bof 2012-04-10 average MS12-027 MSCOMCTL ActiveX Buffer Overflowwindows/fileformat/ms_visual_basic_vbp 2007-09-04 good Microsoft Visual Basic VBP Buffer Overflowwindows/fileformat/msworks_wkspictureinterface 2008-11-28 low Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Code Executionwindows/fileformat/mymp3player_m3u 2010-03-18 good Steinberg MyMP3Player 3.0 Buffer Overflowwindows/fileformat/netop 2011-04-28 normal NetOp Remote Control Client 9.5 Buffer Overflowwindows/fileformat/nuance_pdf_launch_overflow 2010-10-08 great Nuance PDF Reader v6.0 Launch Stack Buffer Overflowwindows/fileformat/openoffice_ole 2008-04-17 normal OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflowwindows/fileformat/orbit_download_failed_bof 2008-04-03 normal Orbit Downloader URL Unicode Conversion Overflowwindows/fileformat/orbital_viewer_orb 2010-02-27 great Orbital Viewer ORB File Parsing Buffer Overflowwindows/fileformat/ovf_format_string 2012-11-08 normal VMWare OVF Tools Format String Vulnerabilitywindows/fileformat/proshow_cellimage_bof 2009-08-20 great ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflowwindows/fileformat/proshow_load_bof 2012-06-06 normal Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflowwindows/fileformat/real_networks_netzip_bof 2011-01-30 good Real Networks Netzip Classic 7.5.1 86 File Parsing Buffer Overflow Vulnerabilitywindows/fileformat/real_player_url_property_bof 2012-12-14 normal RealPlayer RealMedia File Handling Buffer Overflowwindows/fileformat/safenet_softremote_groupname 2009-10-30 good SafeNet SoftRemote GROUPNAME Buffer Overflowwindows/fileformat/sascam_get 2008-12-29 low SasCam Webcam Server v.2.6.5 Get() method Buffer Overflowwindows/fileformat/scadaphone_zip 2011-09-12 good ScadaTEC ScadaPhone <= v5.3.11.1230 Stack Buffer Overflowwindows/fileformat/shadow_stream_recorder_bof 2010-03-29 normal Shadow Stream Recorder 3.0.1.7 Buffer Overflowwindows/fileformat/somplplayer_m3u 2010-01-22 great S.O.M.P.L 1.0 Player Buffer Overflowwindows/fileformat/subtitle_processor_m3u_bof 2011-04-26 normal Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflowwindows/fileformat/tfm_mmplayer_m3u_ppl_bof 2012-03-23 good TFM MMPlayer (m3u/ppl File) Buffer Overflowwindows/fileformat/tugzip 2008-10-28 good TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerabilitywindows/fileformat/ultraiso_ccd 2009-04-03 great UltraISO CCD File Parsing Buffer Overflowwindows/fileformat/ultraiso_cue 2007-05-24 great UltraISO CUE File Parsing Buffer Overflowwindows/fileformat/ursoft_w32dasm 2005-01-24 good URSoft W32Dasm Disassembler Function Buffer Overflowwindows/fileformat/varicad_dwb 2010-03-17 great VariCAD 2010-2.05 EN (DWB File) Stack Buffer Overflowwindows/fileformat/videolan_tivo 2008-10-22 good VideoLAN VLC TiVo Buffer Overflowwindows/fileformat/videospirit_visprj 2011-04-11 good VeryTools Video Spirit Pro <= 1.70windows/fileformat/visio_dxf_bof 2010-05-04 good Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerabilitywindows/fileformat/visiwave_vwr_type 2011-05-20 great VisiWave VWR File Parsing Vulnerabilitywindows/fileformat/vlc_modplug_s3m 2011-04-07 average VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflowwindows/fileformat/vlc_realtext 2008-11-05 good VLC Media Player RealText Subtitle Overflowwindows/fileformat/vlc_smb_uri 2009-06-24 great VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflowwindows/fileformat/vlc_webm 2011-01-31 good VideoLAN VLC MKV Memory Corruptionwindows/fileformat/vuplayer_cue 2009-08-18 good VUPlayer CUE Buffer Overflowwindows/fileformat/vuplayer_m3u 2009-08-18 good VUPlayer M3U Buffer Overflowwindows/fileformat/winamp_maki_bof 2009-05-20 normal Winamp MAKI Buffer Overflowwindows/fileformat/wireshark_packet_dect 2011-04-18 good Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow (local)windows/fileformat/wm_downloader_m3u 2010-07-28 normal WM Downloader 3.1.2.2 Buffer Overflowwindows/fileformat/xenorate_xpl_bof 2009-08-19 great Xenorate 2.50 (.xpl) universal Local Buffer Overflow (SEH)windows/fileformat/xion_m3u_sehbof 2010-11-23 great Xion Audio Player 1.0.126 Unicode Stack Buffer Overflowwindows/fileformat/xradio_xrl_sehbof 2011-02-08 normal xRadio 0.95b Buffer Overflowwindows/fileformat/zinfaudioplayer221_pls 2004-09-24 good Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflowwindows/firewall/blackice_pam_icq 2004-03-18 great ISS PAM.dll ICQ Parser Buffer Overflowwindows/firewall/kerio_auth 2003-04-28 average Kerio Firewall 2.1.4 Authentication Packet Overflowwindows/ftp/32bitftp_list_reply 2010-10-12 good 32bit FTP Client Stack Buffer Overflow windows/ftp/3cdaemon_ftp_user 2005-01-04 average 3Com 3CDaemon 2.0 FTP Username Overflowwindows/ftp/aasync_list_reply 2010-10-12 good AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)windows/ftp/ability_server_stor 2004-10-22 normal Ability Server 2.34 STOR Command Stack Buffer Overflowwindows/ftp/absolute_ftp_list_bof 2011-11-09 normal AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflowwindows/ftp/cesarftp_mkd 2006-06-12 average Cesar FTP 0.99g MKD Command Buffer Overflowwindows/ftp/comsnd_ftpd_fmtstr 2012-06-08 good ComSndFTP v1.3.7 Beta USER Format String (Write4) Vulnerabilitywindows/ftp/dreamftp_format 2004-03-03 good BolinTech Dream FTP Server 1.02 Format Stringwindows/ftp/easyfilesharing_pass 2006-07-31 average Easy File Sharing FTP Server 2.0 PASS Overflowwindows/ftp/easyftp_cwd_fixret 2010-02-16 great EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflowwindows/ftp/easyftp_list_fixret 2010-07-05 great EasyFTP Server <= 1.7.0.11 LIST Command Stack Buffer Overflowwindows/ftp/easyftp_mkd_fixret 2010-04-04 great EasyFTP Server <= 1.7.0.11 MKD Command Stack Buffer Overflowwindows/ftp/filecopa_list_overflow 2006-07-19 average FileCopa FTP Server pre 18 Jul Versionwindows/ftp/filewrangler_list_reply 2010-10-12 good FileWrangler 5.30 Stack Buffer Overflowwindows/ftp/freefloatftp_wbem 2012-12-07 excellent FreeFloat FTP Server Arbitrary File Uploadwindows/ftp/freeftpd_user 2005-11-16 average freeFTPd 1.0 Username Overflowwindows/ftp/ftpgetter_pwd_reply 2010-10-12 good FTPGetter Standard v3.55.0.05 Stack Buffer Overflow (PWD)windows/ftp/ftppad_list_reply 2010-10-12 good FTPPad 1.2.0 Stack Buffer Overflowwindows/ftp/ftpshell51_pwd_reply 2010-10-12 good FTPShell 5.1 Stack Buffer Overflowwindows/ftp/ftpsynch_list_reply 2010-10-12 good FTP Synchronizer Professional 4.0.73.274 Stack Buffer Overflowwindows/ftp/gekkomgr_list_reply 2010-10-12 good Gekko Manager FTP Client Stack Buffer Overflowwindows/ftp/globalscapeftp_input 2005-05-01 great GlobalSCAPE Secure FTP Server Input Overflowwindows/ftp/goldenftp_pass_bof 2011-01-23 average GoldenFTP PASS Stack Buffer Overflowwindows/ftp/httpdx_tolog_format 2009-11-17 great HTTPDX tolog() Function Format String Vulnerabilitywindows/ftp/leapftp_list_reply 2010-10-12 good LeapFTP 3.0.1 Stack Buffer Overflowwindows/ftp/leapftp_pasv_reply 2003-06-09 normal LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflowwindows/ftp/ms09_053_ftpd_nlst 2009-08-31 great Microsoft IIS FTP Server NLST Response Overflowwindows/ftp/netterm_netftpd_user 2005-04-26 great NetTerm NetFTPD USER Buffer Overflowwindows/ftp/odin_list_reply 2010-10-12 good Odin Secure FTP 4.1 Stack Buffer Overflow (LIST)windows/ftp/oracle9i_xdb_ftp_pass 2003-08-18 great Oracle 9i XDB FTP PASS Overflow (win32)windows/ftp/oracle9i_xdb_ftp_unlock 2003-08-18 great Oracle 9i XDB FTP UNLOCK Overflow (win32)windows/ftp/proftp_banner 2009-08-25 normal ProFTP 2.9 Banner Remote Buffer Overflowwindows/ftp/quickshare_traversal_write 2011-02-03 excellent QuickShare File Server 1.2.1 Directory Traversal Vulnerabilitywindows/ftp/ricoh_dl_bof 2012-03-01 normal Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflowwindows/ftp/sami_ftpd_user 2006-01-24 normal KarjaSoft Sami FTP Server v2.02 USER Overflowwindows/ftp/sasser_ftpd_port 2004-05-10 average Sasser Worm avserve FTP PORT Buffer Overflowwindows/ftp/scriptftp_list 2011-10-12 good ScriptFTP <= 3.3 Remote Buffer Overflow (LIST)windows/ftp/seagull_list_reply 2010-10-12 good Seagull FTP v3.3 build 409 Stack Buffer Overflowwindows/ftp/servu_chmod 2004-12-31 normal Serv-U FTP Server < 4.2 Buffer Overflowwindows/ftp/servu_mdtm 2004-02-26 good Serv-U FTPD MDTM Overflowwindows/ftp/slimftpd_list_concat 2005-07-21 great SlimFTPd LIST Concatenation Overflowwindows/ftp/trellian_client_pasv 2010-04-11 normal Trellian FTP Client 3.01 PASV Remote Buffer Overflowwindows/ftp/turboftp_port 2012-10-03 great Turbo FTP Server 1.30.823 PORT Overflowwindows/ftp/vermillion_ftpd_port 2009-09-23 great Vermillion FTP Daemon PORT Command Memory Corruptionwindows/ftp/warftpd_165_pass 1998-03-19 average War-FTPD 1.65 Password Overflowwindows/ftp/warftpd_165_user 1998-03-19 average War-FTPD 1.65 Username Overflowwindows/ftp/wftpd_size 2006-08-23 average Texas Imperial Software WFTPD 3.23 SIZE Overflowwindows/ftp/wsftp_server_503_mkd 2004-11-29 great WS-FTP Server 5.03 MKD Overflowwindows/ftp/wsftp_server_505_xmd5 2006-09-14 average Ipswitch WS_FTP Server 5.05 XMD5 Overflowwindows/ftp/xftp_client_pwd 2010-04-22 normal Xftp FTP Client 3.0 PWD Remote Buffer Overflowwindows/ftp/xlink_client 2009-10-03 normal Xlink FTP Client Buffer Overflowwindows/ftp/xlink_server 2009-10-03 good Xlink FTP Server Buffer Overflowwindows/games/mohaa_getinfo 2004-07-17 great Medal Of Honor Allied Assault getinfo Stack Buffer Overflowwindows/games/racer_503beta5 2008-08-10 great Racer v0.5.3 beta 5 Buffer Overflowwindows/games/ut2004_secure 2004-06-18 good Unreal Tournament 2004 "secure" Overflow (Win32)windows/http/adobe_robohelper_authbypass 2009-09-23 excellent Adobe RoboHelp Server 8 Arbitrary File Upload and Executewindows/http/altn_securitygateway 2008-06-02 average Alt-N SecurityGateway username Buffer Overflowwindows/http/altn_webadmin 2003-06-24 average Alt-N WebAdmin USER Buffer Overflowwindows/http/amlibweb_webquerydll_app 2010-08-03 normal Amlibweb NetOpacs webquery.dll Stack Buffer Overflowwindows/http/apache_chunked 2002-06-19 good Apache Win32 Chunked Encodingwindows/http/apache_mod_rewrite_ldap 2006-07-28 great Apache module mod_rewrite LDAP protocol Buffer Overflowwindows/http/apache_modjk_overflow 2007-03-02 great Apache mod_jk 1.2.20 Buffer Overflowwindows/http/avaya_ccr_imageupload_exec 2012-06-28 excellent Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Executionwindows/http/badblue_ext_overflow 2003-04-20 great BadBlue 2.5 EXT.dll Buffer Overflowwindows/http/badblue_passthru 2007-12-10 great BadBlue 2.72b PassThru Buffer Overflowwindows/http/bea_weblogic_jsessionid 2009-01-13 good BEA WebLogic JSESSIONID Cookie Value Overflowwindows/http/bea_weblogic_post_bof 2008-07-17 great Oracle Weblogic Apache Connector POST Request Buffer Overflowwindows/http/bea_weblogic_transfer_encoding 2008-09-09 great BEA Weblogic Transfer-Encoding Buffer Overflowwindows/http/belkin_bulldog 2009-03-08 average Belkin Bulldog Plus Web Service Buffer Overflowwindows/http/ca_arcserve_rpc_authbypass 2011-07-25 excellent CA Arcserve D2D GWT RPC Credential Information Disclosurewindows/http/ca_igateway_debug 2005-10-06 average CA iTechnology iGateway Debug Mode Buffer Overflowwindows/http/ca_totaldefense_regeneratereports 2011-04-13 excellent CA Total Defense Suite reGenerateReports Stored Procedure SQL Injectionwindows/http/coldfusion_fckeditor 2009-07-03 excellent ColdFusion 8.0.1 Arbitrary File Upload and Executewindows/http/cyclope_ess_sqli 2012-08-08 excellent Cyclope Employee Surveillance Solution v6 SQL Injectionwindows/http/easyftp_list 2010-02-18 great EasyFTP Server <= 1.7.0.11 list.html path Stack Buffer Overflowwindows/http/edirectory_host 2006-10-21 great Novell eDirectory NDS Server Host Header Overflowwindows/http/edirectory_imonitor 2005-08-11 great eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflowwindows/http/efs_easychatserver_username 2007-08-14 great EFS Easy Chat Server Authentication Request Handling Buffer Overflowwindows/http/ektron_xslt_exec 2012-10-16 excellent Ektron 8.02 XSLT Transform Remote Code Executionwindows/http/ezserver_http 2012-06-18 excellent EZHomeTech EzServer <= 6.4.017 Stack Buffer Overflow Vulnerabilitywindows/http/fdm_auth_header 2009-02-02 great Free Download Manager Remote Control Server Buffer Overflowwindows/http/hp_nnm_getnnmdata_hostname 2010-05-11 great HP OpenView Network Node Manager getnnmdata.exe (Hostname) CGI Buffer Overflowwindows/http/hp_nnm_getnnmdata_icount 2010-05-11 great HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflowwindows/http/hp_nnm_getnnmdata_maxage 2010-05-11 great HP OpenView Network Node Manager getnnmdata.exe (MaxAge) CGI Buffer Overflowwindows/http/hp_nnm_nnmrptconfig_nameparams 2011-01-10 normal HP OpenView NNM nnmRptConfig nameParams Buffer Overflowwindows/http/hp_nnm_nnmrptconfig_schdparams 2011-01-10 normal HP OpenView NNM nnmRptConfig.exe schdParams Buffer Overflowwindows/http/hp_nnm_openview5 2007-12-06 great HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflowwindows/http/hp_nnm_ovalarm_lang 2009-12-09 great HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflowwindows/http/hp_nnm_ovas 2008-04-02 good HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication Stack Buffer Overflowwindows/http/hp_nnm_ovbuildpath_textfile 2011-11-01 normal HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflowwindows/http/hp_nnm_ovwebhelp 2009-12-09 great HP OpenView Network Node Manager OvWebHelp.exe CGI Buffer Overflowwindows/http/hp_nnm_ovwebsnmpsrv_main 2010-06-16 great HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflowwindows/http/hp_nnm_ovwebsnmpsrv_ovutil 2010-06-16 great HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflowwindows/http/hp_nnm_ovwebsnmpsrv_uro 2010-06-08 great HP OpenView Network Node Manager ovwebsnmpsrv.exe Unrecognized Option Buffer Overflowwindows/http/hp_nnm_snmp 2009-12-09 great HP OpenView Network Node Manager Snmp.exe CGI Buffer Overflowwindows/http/hp_nnm_snmpviewer_actapp 2010-05-11 great HP OpenView Network Node Manager snmpviewer.exe Buffer Overflowwindows/http/hp_nnm_toolbar_01 2009-01-07 great HP OpenView Network Node Manager Toolbar.exe CGI Buffer Overflowwindows/http/hp_nnm_toolbar_02 2009-01-21 normal HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflowwindows/http/hp_nnm_webappmon_execvp 2010-07-20 great HP OpenView Network Node Manager execvp_nc Buffer Overflowwindows/http/hp_nnm_webappmon_ovjavalocale 2010-08-03 great HP NNM CGI webappmon.exe OvJavaLocale Buffer Overflowwindows/http/hp_openview_insight_backdoor 2011-01-31 excellent HP OpenView Performance Insight Server Backdoor Account Code Executionwindows/http/hp_power_manager_filename 2011-10-19 normal HP Power Manager 'formExportDataLogs' Buffer Overflowwindows/http/hp_power_manager_login 2009-11-04 average Hewlett-Packard Power Manager Administration Buffer Overflowwindows/http/httpdx_handlepeer 2009-10-08 great HTTPDX h_handlepeer() Function Buffer Overflowwindows/http/httpdx_tolog_format 2009-11-17 great HTTPDX tolog() Function Format String Vulnerabilitywindows/http/ia_webmail 2003-11-03 average IA WebMail 3.x Buffer Overflowwindows/http/ibm_tivoli_endpoint_bof 2011-05-31 good IBM Tivoli Endpoint Manager POST Query Buffer Overflowwindows/http/ibm_tpmfosd_overflow 2007-05-02 good IBM TPM for OS Deployment 5.1.0.x rembo.exe Buffer Overflowwindows/http/ibm_tsm_cad_header 2007-09-24 good IBM Tivoli Storage Manager Express CAD Service Buffer Overflowwindows/http/icecast_header 2004-09-28 great Icecast (<= 2.0.1) Header Overwrite (win32)windows/http/integard_password_bof 2010-09-07 great Race River Integard Home/Pro LoginAdmin Password Stack Buffer Overflowwindows/http/intersystems_cache 2009-09-29 great InterSystems Cache UtilConfigHome.csp Argument Buffer Overflowwindows/http/ipswitch_wug_maincfgret 2004-08-25 great Ipswitch WhatsUp Gold 8.03 Buffer Overflowwindows/http/kolibri_http 2010-12-26 good Kolibri <= v2.0 HTTP Server HEAD Buffer Overflowwindows/http/landesk_thinkmanagement_upload_asp 2012-02-15 excellent LANDesk Lenovo ThinkManagement Console Remote Command Executionwindows/http/mailenable_auth_header 2005-04-24 great MailEnable Authorization Header Buffer Overflowwindows/http/manageengine_apps_mngr 2011-04-08 average ManageEngine Applications Manager Authenticated Code Executionwindows/http/maxdb_webdbm_database 2006-08-29 good MaxDB WebDBM Database Parameter Overflowwindows/http/maxdb_webdbm_get_overflow 2005-04-26 good MaxDB WebDBM GET Buffer Overflowwindows/http/mcafee_epolicy_source 2006-07-17 average McAfee ePolicy Orchestrator / ProtectionPilot Overflowwindows/http/mdaemon_worldclient_form2raw 2003-12-29 great MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Buffer Overflowwindows/http/minishare_get_overflow 2004-11-07 average Minishare 1.4.1 Buffer Overflowwindows/http/navicopa_get_overflow 2006-09-28 great NaviCOPA 2.0.1 URL Handling Buffer Overflowwindows/http/netdecision_http_bof 2012-02-24 normal NetDecision 4.5.1 HTTP Server Buffer Overflowwindows/http/novell_imanager_upload 2010-10-01 excellent Novell iManager getMultiPartParameters Arbitrary File Uploadwindows/http/novell_messenger_acceptlang 2006-04-13 average Novell Messenger Server 2.0 Accept-Language Overflowwindows/http/nowsms 2008-02-19 good Now SMS/MMS Gateway Buffer Overflowwindows/http/oracle9i_xdb_pass 2003-08-18 great Oracle 9i XDB HTTP PASS Overflow (win32)windows/http/oracle_btm_writetofile 2012-08-07 excellent Oracle Business Transaction Management FlashTunnelService Remote Code Executionwindows/http/osb_uname_jlist 2010-07-13 excellent Oracle Secure Backup Authentication Bypass/Command Injection Vulnerabilitywindows/http/peercast_url 2006-03-08 average PeerCast <= 0.1216 URL Handling Buffer Overflow (win32)windows/http/php_apache_request_headers_bof 2012-05-08 normal PHP apache_request_headers Function Buffer Overflowwindows/http/privatewire_gateway 2006-06-26 average Private Wire Gateway Buffer Overflowwindows/http/psoproxy91_overflow 2004-02-20 average PSO Proxy v0.91 Stack Buffer Overflowwindows/http/rabidhamster_r4_log 2012-02-09 normal RabidHamster R4 Log Entry sprintf() Buffer Overflowwindows/http/sambar6_search_results 2003-06-21 normal Sambar 6 Search Results Buffer Overflowwindows/http/sap_host_control_cmd_exec 2012-08-14 average SAP NetWeaver HostControl Command Injectionwindows/http/sap_mgmt_con_osexec_payload 2011-03-08 excellent SAP Management Console OSExecute Payload Executionwindows/http/sapdb_webtools 2007-07-05 great SAP DB 7.4 WebTools Buffer Overflowwindows/http/savant_31_overflow 2002-09-10 great Savant 3.1 Web Server Overflowwindows/http/servu_session_cookie 2009-11-01 good Rhinosoft Serv-U Session Cookie Buffer Overflowwindows/http/shoutcast_format 2004-12-23 average SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflowwindows/http/shttpd_post 2006-10-06 average SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)windows/http/solarwinds_storage_manager_sql 2011-12-07 excellent Solarwinds Storage Manager 5.1.0 SQL Injectionwindows/http/sonicwall_scrutinizer_sqli 2012-07-22 excellent Dell SonicWALL (Plixer) Scrutinizer 9 SQL Injectionwindows/http/steamcast_useragent 2008-01-24 average Streamcast <= 0.9.75 HTTP User-Agent Buffer Overflowwindows/http/sws_connection_bof 2012-07-20 normal Simple Web Server Connection Header Buffer Overflowwindows/http/sybase_easerver 2005-07-25 average Sybase EAServer 5.2 Remote Stack Buffer Overflowwindows/http/sysax_create_folder 2012-07-29 normal Sysax Multi Server 5.64 Create Folder Buffer Overflowwindows/http/trackercam_phparg_overflow 2005-02-18 average TrackerCam PHP Argument Buffer Overflowwindows/http/trendmicro_officescan 2007-06-28 good Trend Micro OfficeScan Remote Stack Buffer Overflowwindows/http/umbraco_upload_aspx 2012-06-28 excellent Umbraco CMS Remote Command Executionwindows/http/webster_http 2002-12-02 average Webster HTTP Server GET Buffer Overflowwindows/http/xampp_webdav_upload_php 2012-01-14 excellent XAMPP WebDAV PHP Uploadwindows/http/xitami_if_mod_since 2007-09-24 average Xitami 2.5c2 Web Server If-Modified-Since Overflowwindows/http/zenworks_assetmgmt_uploadservlet 2011-11-02 excellent Novell ZENworks Asset Management Remote Executionwindows/http/zenworks_uploadservlet 2010-03-30 excellent Novell ZENworks Configuration Management Remote Executionwindows/iis/iis_webdav_upload_asp 1994-01-01 excellent Microsoft IIS WebDAV Write Access Code Executionwindows/iis/ms01_023_printer 2001-05-01 good Microsoft IIS 5.0 Printer Host Header Overflowwindows/iis/ms01_026_dbldecode 2001-05-15 excellent Microsoft IIS/PWS CGI Filename Double Decode Command Executionwindows/iis/ms01_033_idq 2001-06-18 good Microsoft IIS 5.0 IDQ Path Overflowwindows/iis/ms02_018_htr 2002-04-10 good Microsoft IIS 4.0 .HTR Path Overflowwindows/iis/ms02_065_msadc 2002-11-20 normal Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflowwindows/iis/ms03_007_ntdll_webdav 2003-05-30 great Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflowwindows/iis/msadc 1998-07-17 excellent Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Executionwindows/imap/eudora_list 2005-12-20 great Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflowwindows/imap/imail_delete 2004-11-12 average IMail IMAP4D Delete Overflowwindows/imap/ipswitch_search 2007-07-18 average Ipswitch IMail IMAP SEARCH Buffer Overflowwindows/imap/mailenable_login 2006-12-11 great MailEnable IMAPD (2.34/2.35) Login Request Buffer Overflowwindows/imap/mailenable_status 2005-07-13 great MailEnable IMAPD (1.54) STATUS Request Buffer Overflowwindows/imap/mailenable_w3c_select 2005-10-03 great MailEnable IMAPD W3C Logging Buffer Overflowwindows/imap/mdaemon_cram_md5 2004-11-12 great Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflowwindows/imap/mdaemon_fetch 2008-03-13 great MDaemon 9.6.4 IMAPD FETCH Buffer Overflowwindows/imap/mercur_imap_select_overflow 2006-03-17 average Mercur v5.0 IMAP SP3 SELECT Buffer Overflowwindows/imap/mercur_login 2006-03-17 average Mercur Messaging 2005 IMAP Login Buffer Overflowwindows/imap/mercury_login 2007-03-06 average Mercury/32 <= 4.01b LOGIN Buffer Overflowwindows/imap/mercury_rename 2004-11-29 average Mercury/32 v4.01a IMAP RENAME Buffer Overflowwindows/imap/novell_netmail_append 2006-12-23 average Novell NetMail <= 3.52d IMAP APPEND Buffer Overflowwindows/imap/novell_netmail_auth 2007-01-07 average Novell NetMail <=3.52d IMAP AUTHENTICATE Buffer Overflowwindows/imap/novell_netmail_status 2005-11-18 average Novell NetMail <= 3.52d IMAP STATUS Buffer Overflowwindows/imap/novell_netmail_subscribe 2006-12-23 average Novell NetMail <= 3.52d IMAP SUBSCRIBE Buffer Overflowwindows/isapi/ms00_094_pbserver 2000-12-04 good Microsoft IIS Phone Book Service Overflowwindows/isapi/ms03_022_nsiislog_post 2003-06-25 good Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflowwindows/isapi/ms03_051_fp30reg_chunked 2003-11-11 good Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflowwindows/isapi/rsa_webagent_redirect 2005-10-21 good Microsoft IIS ISAPI RSA WebAgent Redirect Overflowwindows/isapi/w3who_query 2004-12-06 good Microsoft IIS ISAPI w3who.dll Query String Overflowwindows/ldap/imail_thc 2004-02-17 average IMail LDAP Service Buffer Overflowwindows/ldap/pgp_keyserver7 2001-07-16 good Network Associates PGP KeyServer 7 LDAP Buffer Overflowwindows/license/calicclnt_getconfig 2005-03-02 average Computer Associates License Client GETCONFIG Overflowwindows/license/calicserv_getconfig 2005-03-02 normal Computer Associates License Server GETCONFIG Overflowwindows/license/flexnet_lmgrd_bof 2012-03-23 normal FlexNet License Server Manager lmgrd Buffer Overflowwindows/license/sentinel_lm7_udp 2005-03-07 average SentinelLM UDP Buffer Overflowwindows/local/always_install_elevated 2010-03-18 average Windows AlwaysInstallElevated MSIwindows/local/ask 2012-01-03 excellent Windows Escalate UAC Execute RunAswindows/local/bypassuac 2010-12-31 excellent Windows Escalate UAC Protection Bypasswindows/local/current_user_psexec 1999-01-01 excellent PsExec via Current User Tokenwindows/local/ms10_092_schelevator 2010-09-13 excellent Windows Escalate Task Scheduler XML Privilege Escalationwindows/local/ms11_080_afdjoinleaf 2011-11-30 average MS11-080 AfdJoinLeaf Privilege Escalationwindows/local/payload_inject 2011-10-12 excellent Windows Manage Memory Payload Injectionwindows/local/persistence 2011-10-19 excellent Windows Manage Persistent Payload Installerwindows/local/s4u_persistence 2013-01-02 excellent Windows Manage User Level Persistent Payload Installerwindows/local/service_permissions 2012-10-15 great Windows Escalate Service Permissions Local Privilege Escalationwindows/local/trusted_service_path 2001-10-25 excellent Windows Service Trusted Path Privilege Escalationwindows/lotus/domino_http_accept_language 2008-05-20 average IBM Lotus Domino Web Server Accept-Language Stack Buffer Overflowwindows/lotus/domino_icalendar_organizer 2010-09-14 normal IBM Lotus Domino iCalendar MAILTO Buffer Overflowwindows/lotus/domino_sametime_stmux 2008-05-21 average IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflowwindows/lotus/lotusnotes_lzh 2011-05-24 normal Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)windows/lpd/hummingbird_exceed 2005-05-27 average Hummingbird Connectivity 10 SP5 LPD Buffer Overflowwindows/lpd/niprint 2003-11-05 good NIPrint LPD Request Overflowwindows/lpd/saplpd 2008-02-04 good SAP SAPLPD 6.28 Buffer Overflowwindows/lpd/wincomlpd_admin 2008-02-04 good WinComLPD <= 3.0.2 Buffer Overflowwindows/misc/agentxpp_receive_agentx 2010-04-16 good AgentX++ Master AgentX::receive_agentx Stack Buffer Overflowwindows/misc/allmediaserver_bof 2012-07-04 normal ALLMediaServer 0.8 Buffer Overflowwindows/misc/apple_quicktime_rtsp_response 2007-11-23 normal Apple QuickTime 7.3 RTSP Response Header Buffer Overflowwindows/misc/asus_dpcproxy_overflow 2008-03-21 average Asus Dpcproxy Buffer Overflowwindows/misc/avaya_winpmd_unihostrouter 2011-05-23 normal Avaya WinPMD UniteHostRouter Buffer Overflowwindows/misc/avidphoneticindexer 2011-11-29 normal Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflowwindows/misc/bakbone_netvault_heap 2005-04-01 average BakBone NetVault Remote Heap Overflowwindows/misc/bcaaa_bof 2011-04-04 good Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflowwindows/misc/bigant_server 2008-04-15 average BigAnt Server 2.2 Buffer Overflowwindows/misc/bigant_server_250 2008-04-15 great BigAnt Server 2.50 SP1 Buffer Overflowwindows/misc/bigant_server_dupf_upload 2013-01-09 excellent BigAnt Server DUPF Command Arbitrary File Uploadwindows/misc/bigant_server_sch_dupf_bof 2013-01-09 normal BigAnt Server 2 SCH And DUPF Buffer Overflowwindows/misc/bigant_server_usv 2009-12-29 great BigAnt Server 2.52 USV Buffer Overflowwindows/misc/bomberclone_overflow 2006-02-16 average Bomberclone 0.11.6 Buffer Overflowwindows/misc/bopup_comm 2009-06-18 good Bopup Communications Server Buffer Overflowwindows/misc/borland_interbase 2007-07-24 average Borland Interbase Create-Request Buffer Overflowwindows/misc/borland_starteam 2008-04-02 average Borland CaliberRM StarTeam Multicast Service Buffer Overflowwindows/misc/citrix_streamprocess 2011-01-20 good Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflowwindows/misc/citrix_streamprocess_data_msg 2011-11-04 normal Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflowwindows/misc/citrix_streamprocess_get_boot_record_request 2011-11-04 normal Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflowwindows/misc/citrix_streamprocess_get_footer 2011-11-04 normal Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020002 Buffer Overflowwindows/misc/citrix_streamprocess_get_objects 2011-11-04 normal Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflowwindows/misc/doubletake 2008-06-04 average DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflowwindows/misc/eiqnetworks_esa 2006-07-24 average eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflowwindows/misc/eiqnetworks_esa_topology 2006-07-25 average eIQNetworks ESA Topology DELETEDEVICE Overflowwindows/misc/enterasys_netsight_syslog_bof 2011-12-19 normal Enterasys NetSight nssyslogd.exe Buffer Overflowwindows/misc/eureka_mail_err 2009-10-22 normal Eureka Email 2.2q ERR Remote Buffer Overflowwindows/misc/fb_isc_attach_database 2007-10-03 average Firebird Relational Database isc_attach_database() Buffer Overflowwindows/misc/fb_isc_create_database 2007-10-03 average Firebird Relational Database isc_create_database() Buffer Overflowwindows/misc/fb_svc_attach 2007-10-03 average Firebird Relational Database SVC_attach() Buffer Overflowwindows/misc/gimp_script_fu 2012-05-18 normal GIMP script-fu Server Buffer Overflowwindows/misc/hp_dataprotector_dtbclslogin 2010-09-09 normal HP Data Protector DtbClsLogin Buffer Overflowwindows/misc/hp_dataprotector_new_folder 2012-03-12 normal HP Data Protector Create New Folder Buffer Overflowwindows/misc/hp_imc_uam 2012-08-29 normal HP Intelligent Management Center UAM Buffer Overflowwindows/misc/hp_magentservice 2012-01-12 average HP Diagnostics Server magentservice.exe Overflowwindows/misc/hp_omniinet_1 2009-12-17 great HP OmniInet.exe MSG_PROTOCOL Buffer Overflowwindows/misc/hp_omniinet_2 2009-12-17 great HP OmniInet.exe MSG_PROTOCOL Buffer Overflowwindows/misc/hp_omniinet_3 2011-06-29 great HP OmniInet.exe Opcode 27 Buffer Overflowwindows/misc/hp_omniinet_4 2011-06-29 good HP OmniInet.exe Opcode 20 Buffer Overflowwindows/misc/hp_operations_agent_coda_34 2012-07-09 normal HP Operations Agent Opcode coda.exe 0x34 Buffer Overflowwindows/misc/hp_operations_agent_coda_8c 2012-07-09 normal HP Operations Agent Opcode coda.exe 0x8c Buffer Overflowwindows/misc/hp_ovtrace 2007-08-09 average HP OpenView Operations OVTrace Buffer Overflowwindows/misc/ib_isc_attach_database 2007-10-03 good Borland InterBase isc_attach_database() Buffer Overflowwindows/misc/ib_isc_create_database 2007-10-03 good Borland InterBase isc_create_database() Buffer Overflowwindows/misc/ib_svc_attach 2007-10-03 good Borland InterBase SVC_attach() Buffer Overflowwindows/misc/ibm_cognos_tm1admsd_bof 2012-04-02 normal IBM Cognos tm1admsd.exe Overflowwindows/misc/ibm_director_cim_dllinject 2009-03-10 excellent IBM System Director Agent DLL Injectionwindows/misc/ibm_tsm_cad_ping 2009-11-04 good IBM Tivoli Storage Manager Express CAD Service Buffer Overflowwindows/misc/ibm_tsm_rca_dicugetidentify 2009-11-04 great IBM Tivoli Storage Manager Express RCA Service Buffer Overflowwindows/misc/itunes_extm3u_bof 2012-06-21 normal Apple iTunes 10 Extended M3U Stack Buffer Overflowwindows/misc/landesk_aolnsrvr 2007-04-13 average LANDesk Management Suite 8.7 Alert Service Buffer Overflowwindows/misc/mercury_phonebook 2005-12-19 average Mercury/32 <= v4.01b PH Server Module Buffer Overflowwindows/misc/mini_stream 2009-12-25 normal Mini-Stream 3.0.1.1 Buffer Overflowwindows/misc/mirc_privmsg_server 2008-10-02 normal mIRC <= 6.34 PRIVMSG Handling Stack Buffer Overflowwindows/misc/ms07_064_sami 2007-12-11 normal Microsoft DirectX DirectShow SAMI Buffer Overflowwindows/misc/ms10_104_sharepoint 2010-12-14 excellent Microsoft Office SharePoint Server 2007 Remote Code Executionwindows/misc/netcat110_nt 2004-12-27 great Netcat v1.10 NT Stack Buffer Overflowwindows/misc/nettransport 2010-01-02 normal NetTransport Download Manager 2.90.510 Buffer Overflowwindows/misc/poisonivy_bof 2012-06-24 normal Poison Ivy 2.3.2 C&C Server Buffer Overflowwindows/misc/poppeeper_date 2009-02-27 normal POP Peeper v3.4 DATE Buffer Overflowwindows/misc/poppeeper_uidl 2009-02-27 normal POP Peeper v3.4 UIDL Buffer Overflowwindows/misc/pxexploit 2011-08-05 excellent PXE Exploit Serverwindows/misc/realtek_playlist 2008-12-16 great Realtek Media Player Playlist Buffer Overflowwindows/misc/sap_2005_license 2009-08-01 great SAP Business One License Manager 2005 Buffer Overflowwindows/misc/sap_netweaver_dispatcher 2012-05-08 normal SAP NetWeaver Dispatcher DiagTraceR3Info Buffer Overflowwindows/misc/shixxnote_font 2004-10-04 great ShixxNOTE 6.net Font Field Overflowwindows/misc/splayer_content_type 2011-05-04 normal SPlayer 3.7 Content-Type Buffer Overflowwindows/misc/stream_down_bof 2011-12-27 good CoCSoft StreamDown 6.8.0 Buffer Overflowwindows/misc/talkative_response 2009-03-17 normal Talkative IRC v0.4.4.16 Response Buffer Overflowwindows/misc/tiny_identd_overflow 2007-05-14 average TinyIdentD 2.2 Stack Buffer Overflowwindows/misc/trendmicro_cmdprocessor_addtask 2011-12-07 good TrendMicro Control Manger <= v5.5 CmdProcessor.exe Stack Buffer Overflowwindows/misc/ufo_ai 2009-10-28 average UFO: Alien Invasion IRC Client Buffer Overflowwindows/misc/windows_rsh 2007-07-24 average Windows RSH daemon Buffer Overflowwindows/misc/wireshark_lua 2011-07-18 excellent Wireshark console.lua Pre-Loading Script Executionwindows/misc/wireshark_packet_dect 2011-04-18 good Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow (remote)windows/mmsp/ms10_025_wmss_connect_funnel 2010-04-13 great Windows Media Services ConnectFunnel Stack Buffer Overflowwindows/motorola/timbuktu_fileupload 2008-05-10 excellent Timbuktu Pro Directory Traversal/File Uploadwindows/mssql/lyris_listmanager_weak_pass 2005-12-08 excellent Lyris ListManager MSDE Weak sa Passwordwindows/mssql/ms02_039_slammer 2002-07-24 good Microsoft SQL Server Resolution Overflowwindows/mssql/ms02_056_hello 2002-08-05 good Microsoft SQL Server Hello Overflowwindows/mssql/ms09_004_sp_replwritetovarbin 2008-12-09 good Microsoft SQL Server sp_replwritetovarbin Memory Corruptionwindows/mssql/ms09_004_sp_replwritetovarbin_sqli 2008-12-09 excellent Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injectionwindows/mssql/mssql_linkcrawler 2000-01-01 great Microsoft SQL Server Database Link Crawling Command Executionwindows/mssql/mssql_payload 2000-05-30 excellent Microsoft SQL Server Payload Executionwindows/mssql/mssql_payload_sqli 2000-05-30 excellent Microsoft SQL Server Payload Execution via SQL Injectionwindows/mysql/mysql_mof 2012-12-01 excellent Oracle MySQL for Microsoft Windows MOF Executionwindows/mysql/mysql_payload 2009-01-16 excellent Oracle MySQL for Microsoft Windows Payload Executionwindows/mysql/mysql_yassl_hello 2008-01-04 average MySQL yaSSL SSL Hello Message Buffer Overflowwindows/mysql/scrutinizer_upload_exec 2012-07-27 excellent Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credentialwindows/nfs/xlink_nfsd 2006-11-06 average Omni-NFS Server Buffer Overflowwindows/nntp/ms05_030_nntp 2005-06-14 normal Microsoft Outlook Express NNTP Response Parsing Buffer Overflowwindows/novell/file_reporter_fsfui_upload 2012-11-16 great NFR Agent FSFUI Record File Upload RCEwindows/novell/groupwisemessenger_client 2008-07-02 normal Novell GroupWise Messenger Client Buffer Overflowwindows/novell/netiq_pum_eval 2012-11-15 excellent NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Executionwindows/novell/nmap_stor 2006-12-23 average Novell NetMail <= 3.52d NMAP STOR Buffer Overflowwindows/novell/zenworks_desktop_agent 2005-05-19 good Novell ZENworks 6.5 Desktop/Server Management Overflowwindows/novell/zenworks_preboot_op21_bof 2010-03-30 normal Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflowwindows/novell/zenworks_preboot_op4c_bof 2012-02-22 normal Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflowwindows/novell/zenworks_preboot_op6_bof 2010-03-30 normal Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflowwindows/novell/zenworks_preboot_op6c_bof 2012-02-22 normal Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflowwindows/oracle/client_system_analyzer_upload 2011-01-18 excellent Oracle Database Client System Analyzer Arbitrary File Uploadwindows/oracle/extjob 2007-01-01 excellent Oracle Job Scheduler Named Pipe Command Executionwindows/oracle/osb_ndmp_auth 2009-01-14 good Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflowwindows/oracle/tns_arguments 2001-06-28 good Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflowwindows/oracle/tns_auth_sesskey 2009-10-20 great Oracle 10gR2 TNS Listener AUTH_SESSKEY Buffer Overflowwindows/oracle/tns_service_name 2002-05-27 good Oracle 8i TNS Listener SERVICE_NAME Buffer Overflowwindows/pop3/seattlelab_pass 2003-05-07 great Seattle Lab Mail 5.5 POP3 Buffer Overflowwindows/postgres/postgres_payload 2009-04-10 excellent PostgreSQL for Microsoft Windows Payload Executionwindows/proxy/bluecoat_winproxy_host 2005-01-05 great Blue Coat WinProxy Host Header Overflowwindows/proxy/ccproxy_telnet_ping 2004-11-11 average CCProxy <= v6.2 Telnet Proxy Ping Overflowwindows/proxy/proxypro_http_get 2004-02-23 great Proxy-Pro Professional GateKeeper 4.7 GET Request Overflowwindows/proxy/qbik_wingate_wwwproxy 2006-06-07 good Qbik WinGate WWW Proxy Server URL Processing Overflowwindows/scada/citect_scada_odbc 2008-06-11 normal CitectSCADA/CitectFacilities ODBC Buffer Overflowwindows/scada/codesys_web_server 2011-12-02 normal SCADA 3S CoDeSys CmpWebServer <= v3.4 SP4 Patch 2 Stack Buffer Overflowwindows/scada/daq_factory_bof 2011-09-13 good DaqFactory HMI NETB Request Overflowwindows/scada/factorylink_csservice 2011-03-25 normal Siemens FactoryLink 8 CSService Logging Path Param Buffer Overflowwindows/scada/factorylink_vrn_09 2011-03-21 average Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflowwindows/scada/iconics_genbroker 2011-03-21 good Iconics GENESIS32 Integer overflow version 9.21.201.01windows/scada/iconics_webhmi_setactivexguid 2011-05-05 good ICONICS WebHMI ActiveX Buffer Overflowwindows/scada/igss9_igssdataserver_listall 2011-03-24 good 7-Technologies IGSS <= v9.00.00 b11063 IGSSdataServer.exe Stack Buffer Overflowwindows/scada/igss9_igssdataserver_rename 2011-03-24 normal 7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflowwindows/scada/igss9_misc 2011-03-24 excellent 7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilitieswindows/scada/indusoft_webstudio_exec 2011-11-04 excellent InduSoft Web Studio Arbitrary Upload Remote Code Executionwindows/scada/moxa_mdmtool 2010-10-20 great MOXA Device Manager Tool 2.1 Buffer Overflowwindows/scada/procyon_core_server 2011-09-08 normal Procyon Core Server HMI <= v1.13 Coreservice.exe Stack Buffer Overflowwindows/scada/realwin 2008-09-26 great DATAC RealWin SCADA Server Buffer Overflowwindows/scada/realwin_on_fc_binfile_a 2011-03-21 great DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflowwindows/scada/realwin_on_fcs_login 2011-03-21 great RealWin SCADA Server DATAC Login Buffer Overflowwindows/scada/realwin_scpc_initialize 2010-10-15 great DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflowwindows/scada/realwin_scpc_initialize_rf 2010-10-15 great DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflowwindows/scada/realwin_scpc_txtevent 2010-11-18 great DATAC RealWin SCADA Server SCPC_TXTEVENT Buffer Overflowwindows/scada/scadapro_cmdexe 2011-09-16 excellent Measuresoft ScadaPro <= 4.0.0 Remote Command Executionwindows/scada/sunway_force_control_netdbsrv 2011-09-22 great Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57windows/scada/winlog_runtime 2011-01-13 great Sielco Sistemi Winlog Buffer Overflowwindows/scada/winlog_runtime_2 2012-06-04 normal Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16windows/sip/aim_triton_cseq 2006-07-10 great AIM Triton 1.0.4 CSeq Buffer Overflowwindows/sip/sipxezphone_cseq 2006-07-10 great SIPfoundry sipXezPhone 0.35a CSeq Field Overflowwindows/sip/sipxphone_cseq 2006-07-10 great SIPfoundry sipXphone 2.6.0.27 CSeq Buffer Overflowwindows/smb/ms03_049_netapi 2003-11-11 good Microsoft Workstation Service NetAddAlternateComputerName Overflowwindows/smb/ms04_007_killbill 2004-02-10 low Microsoft ASN.1 Library Bitstring Heap Overflowwindows/smb/ms04_011_lsass 2004-04-13 good Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflowwindows/smb/ms04_031_netdde 2004-10-12 good Microsoft NetDDE Service Overflowwindows/smb/ms05_039_pnp 2005-08-09 good Microsoft Plug and Play Service Overflowwindows/smb/ms06_025_rasmans_reg 2006-06-13 good Microsoft RRAS Service RASMAN Registry Overflowwindows/smb/ms06_025_rras 2006-06-13 average Microsoft RRAS Service Overflowwindows/smb/ms06_040_netapi 2006-08-08 good Microsoft Server Service NetpwPathCanonicalize Overflowwindows/smb/ms06_066_nwapi 2006-11-14 good Microsoft Services MS06-066 nwapi32.dll Module Exploitwindows/smb/ms06_066_nwwks 2006-11-14 good Microsoft Services MS06-066 nwwks.dll Module Exploitwindows/smb/ms06_070_wkssvc 2006-11-14 manual Microsoft Workstation Service NetpManageIPCConnect Overflowwindows/smb/ms07_029_msdns_zonename 2007-04-12 manual Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)windows/smb/ms08_067_netapi 2008-10-28 great Microsoft Server Service Relative Path Stack Corruptionwindows/smb/ms09_050_smb2_negotiate_func_index 2009-09-07 good Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereferencewindows/smb/ms10_061_spoolss 2010-09-14 excellent Microsoft Print Spooler Service Impersonation Vulnerabilitywindows/smb/netidentity_xtierrpcpipe 2009-04-06 great Novell NetIdentity Agent XTIERRPCPIPE Named Pipe Buffer Overflowwindows/smb/psexec 1999-01-01 manual Microsoft Windows Authenticated User Code Executionwindows/smb/smb_relay 2001-03-31 excellent Microsoft Windows SMB Relay Code Executionwindows/smb/timbuktu_plughntcommand_bof 2009-06-25 great Timbuktu <= 8.6.6 PlughNTCommand Named Pipe Buffer Overflowwindows/smtp/mailcarrier_smtp_ehlo 2004-10-26 good TABS MailCarrier v2.51 SMTP EHLO Overflowwindows/smtp/mercury_cram_md5 2007-08-18 great Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflowwindows/smtp/ms03_046_exchange2000_xexch50 2003-10-15 good MS03-046 Exchange 2000 XEXCH50 Heap Overflowwindows/smtp/njstar_smtp_bof 2011-10-31 normal NJStar Communicator 3.00 MiniSMTP Buffer Overflowwindows/smtp/wmailserver 2005-07-11 average SoftiaCom WMailserver 1.0 Buffer Overflowwindows/smtp/ypops_overflow1 2004-09-27 average YPOPS 0.6 Buffer Overflowwindows/ssh/freeftpd_key_exchange 2006-05-12 average FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflowwindows/ssh/freesshd_authbypass 2010-08-11 excellent Freesshd Authentication Bypasswindows/ssh/freesshd_key_exchange 2006-05-12 average FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflowwindows/ssh/putty_msg_debug 2002-12-16 normal PuTTy.exe <= v0.53 Buffer Overflowwindows/ssh/securecrt_ssh1 2002-07-23 average SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflowwindows/ssh/sysax_ssh_username 2012-02-27 normal Sysax 5.53 SSH Username Buffer Overflowwindows/ssl/ms04_011_pct 2004-04-13 average Microsoft Private Communications Transport Overflowwindows/telnet/gamsoft_telsrv_username 2000-07-17 average GAMSoft TelSrv 1.5 Username Buffer Overflowwindows/telnet/goodtech_telnet 2005-03-15 average GoodTech Telnet Server <= 5.0.6 Buffer Overflowwindows/tftp/attftp_long_filename 2006-11-27 average Allied Telesyn TFTP Server 1.9 Long Filename Overflowwindows/tftp/distinct_tftp_traversal 2012-04-08 excellent Distinct TFTP 3.10 Writable Directory Traversal Executionwindows/tftp/dlink_long_filename 2007-03-12 good D-Link TFTP 1.0 Long Filename Buffer Overflowwindows/tftp/futuresoft_transfermode 2005-05-31 average FutureSoft TFTP Server 2000 Transfer-Mode Overflowwindows/tftp/netdecision_tftp_traversal 2009-05-16 excellent NetDecision 4.2 TFTP Writable Directory Traversal Executionwindows/tftp/opentftp_error_code 2008-07-05 average OpenTFTP SP 1.4 Error Packet Overflowwindows/tftp/quick_tftp_pro_mode 2008-03-27 good Quick FTP Pro 2.1 Transfer-Mode Overflowwindows/tftp/tftpd32_long_filename 2002-11-19 average TFTPD32 <= 2.21 Long Filename Buffer Overflowwindows/tftp/tftpdwin_long_filename 2006-09-21 great TFTPDWIN v0.4.2 Long Filename Buffer Overflowwindows/tftp/tftpserver_wrq_bof 2008-03-26 normal TFTP Server for Windows 1.4 ST WRQ Buffer Overflowwindows/tftp/threectftpsvc_long_mode 2006-11-27 great 3CTftpSvc TFTP Long Mode Buffer Overflowwindows/unicenter/cam_log_security 2005-08-22 great CA CAM log_security() Stack Buffer Overflow (Win32)windows/vnc/realvnc_client 2001-01-29 normal RealVNC 3.3.7 Client Buffer Overflowwindows/vnc/ultravnc_client 2006-04-04 normal UltraVNC 1.0.1 Client Buffer Overflowwindows/vnc/ultravnc_viewer_bof 2008-02-06 normal UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflowwindows/vnc/winvnc_http_get 2001-01-29 average WinVNC Web Server <= v3.3.3r7 GET Overflowwindows/vpn/safenet_ike_11 2009-06-01 average SafeNet SoftRemote IKE Service Buffer Overflowwindows/winrm/winrm_script_exec 2012-11-01 manual WinRM Script Exec Remote Code Executionwindows/wins/ms04_045_wins 2004-12-14 great Microsoft WINS Service Memory Overwrite
这个命令会显示Metasploit框架中所有可用的渗透攻击模块。在MSF终端中,你可以针对渗透测试中发现的安全漏洞来实施相应的渗透攻击。
2. msf > show auxiliary
Auxiliary
=========Name Disclosure Date Rank Description---- --------------- ---- -----------admin/2wire/xslt_password_reset 2007-08-15 normal 2Wire Cross-Site Request Forgery Password Reset Vulnerabilityadmin/backupexec/dump normal Veritas Backup Exec Windows Remote File Accessadmin/backupexec/registry normal Veritas Backup Exec Server Registry Accessadmin/cisco/cisco_secure_acs_bypass normal Cisco Secure ACS Version < 5.1.0.44.5 or 5.2.0.26.2 Unauthorized Password Changeadmin/cisco/vpn_3000_ftp_bypass 2006-08-23 normal Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Accessadmin/db2/db2rcmd 2004-03-04 normal IBM DB2 db2rcmd.exe Command Execution Vulnerabilityadmin/edirectory/edirectory_dhost_cookie normal Novell eDirectory DHOST Predictable Session Cookieadmin/edirectory/edirectory_edirutil normal Novell eDirectory eMBox Unauthenticated File Accessadmin/emc/alphastor_devicemanager_exec 2008-05-27 normal EMC AlphaStor Device Manager Arbitrary Command Executionadmin/emc/alphastor_librarymanager_exec 2008-05-27 normal EMC AlphaStor Library Manager Arbitrary Command Executionadmin/hp/hp_data_protector_cmd 2011-02-07 normal HP Data Protector 6.1 EXEC_CMD Command Executionadmin/http/contentkeeper_fileaccess normal ContentKeeper Web Appliance mimencode File Accessadmin/http/dlink_dir_300_600_exec_noauth 2013-02-04 normal D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Executionadmin/http/hp_web_jetadmin_exec 2004-04-27 normal HP Web JetAdmin 6.5 Server Arbitrary Command Executionadmin/http/iis_auth_bypass 2010-07-02 normal MS10-065 Microsoft IIS 5 NTFS Stream Authentication Bypassadmin/http/intersil_pass_reset 2007-09-10 normal Intersil (Boa) HTTPd Basic Authentication Password Resetadmin/http/iomega_storcenterpro_sessionid normal Iomega StorCenter Pro NAS Web Authentication Bypassadmin/http/jboss_seam_exec 2010-07-19 normal JBoss Seam 2 Remote Command Executionadmin/http/linksys_wrt54gl_exec 2013-01-18 normal Linksys WRT54GL Remote Command Executionadmin/http/netgear_sph200d_traversal normal Netgear SPH200D Directory Traversal Vulnerabilityadmin/http/novell_file_reporter_filedelete normal Novell File Reporter Agent Arbitrary File Deleteadmin/http/rails_devise_pass_reset 2013-01-28 normal Ruby on Rails Devise Authentication Password Resetadmin/http/scrutinizer_add_user 2012-07-27 normal Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypassadmin/http/tomcat_administration normal Tomcat Administration Tool Default Accessadmin/http/tomcat_utf8_traversal normal Tomcat UTF-8 Directory Traversal Vulnerabilityadmin/http/trendmicro_dlp_traversal normal TrendMicro Data Loss Prevention 5.5 Directory Traversaladmin/http/typo3_sa_2009_001 2009-01-20 normal TYPO3 sa-2009-001 Weak Encryption Key File Disclosureadmin/http/typo3_sa_2009_002 2009-02-10 normal Typo3 sa-2009-002 File Disclosureadmin/http/typo3_sa_2010_020 normal TYPO3 sa-2010-020 Remote File Disclosureadmin/http/typo3_winstaller_default_enc_keys normal TYPO3 Winstaller default Encryption Keysadmin/maxdb/maxdb_cons_exec 2008-01-09 normal SAP MaxDB cons.exe Remote Command Injectionadmin/misc/wol normal UDP Wake-On-Lan (WOL)admin/motorola/wr850g_cred 2004-09-24 normal Motorola WR850G v4.03 Credentialsadmin/ms/ms08_059_his2006 2008-10-14 normal Microsoft Host Integration Server 2006 Command Execution Vulnerabilityadmin/mssql/mssql_enum normal Microsoft SQL Server Configuration Enumeratoradmin/mssql/mssql_exec normal Microsoft SQL Server xp_cmdshell Command Executionadmin/mssql/mssql_findandsampledata normal Microsoft SQL Server - Find and Sample Dataadmin/mssql/mssql_idf normal Microsoft SQL Server - Interesting Data Finderadmin/mssql/mssql_ntlm_stealer normal Microsoft SQL Server NTLM Stealeradmin/mssql/mssql_ntlm_stealer_sqli normal Microsoft SQL Server NTLM Stealer - SQLiadmin/mssql/mssql_sql normal Microsoft SQL Server Generic Queryadmin/mssql/mssql_sql_file normal Microsoft SQL Server Generic Query from Fileadmin/mysql/mysql_enum normal MySQL Enumeration Moduleadmin/mysql/mysql_sql normal MySQL SQL Generic Queryadmin/natpmp/natpmp_map normal NAT-PMP Port Mapperadmin/officescan/tmlisten_traversal normal TrendMicro OfficeScanNT Listener Traversal Arbitrary File Accessadmin/oracle/ora_ntlm_stealer 2009-04-07 normal Oracle SMB Relay Code Executionadmin/oracle/oracle_login 2008-11-20 normal Oracle Account Discoveryadmin/oracle/oracle_sql 2007-12-07 normal Oracle SQL Generic Queryadmin/oracle/oraenum normal Oracle Database Enumerationadmin/oracle/osb_execqr 2009-01-14 normal Oracle Secure Backup exec_qr() Command Injection Vulnerabilityadmin/oracle/osb_execqr2 2009-08-18 normal Oracle Secure Backup Authentication Bypass/Command Injection Vulnerabilityadmin/oracle/osb_execqr3 2010-07-13 normal Oracle Secure Backup Authentication Bypass/Command Injection Vulnerabilityadmin/oracle/post_exploitation/win32exec 2007-12-07 normal Oracle Java execCommand (Win32)admin/oracle/post_exploitation/win32upload 2005-02-10 normal Oracle URL Downloadadmin/oracle/sid_brute 2009-01-07 normal Oracle TNS Listener SID Brute Forceradmin/oracle/tnscmd 2009-02-01 normal Oracle TNS Listener Command Issueradmin/pop2/uw_fileretrieval 2000-07-14 normal UoW pop2d Remote File Retrieval Vulnerabilityadmin/postgres/postgres_readfile normal PostgreSQL Server Generic Queryadmin/postgres/postgres_sql normal PostgreSQL Server Generic Queryadmin/sap/sap_mgmt_con_osexec normal SAP Management Console OSExecuteadmin/scada/igss_exec_17 2011-03-21 normal Interactive Graphical SCADA System Remote Command Injectionadmin/scada/modicon_command 2012-04-05 normal Schneider Modicon Remote START/STOP Commandadmin/scada/modicon_password_recovery 2012-01-19 normal Schneider Modicon Quantum Password Recoveryadmin/scada/modicon_stux_transfer 2012-04-05 normal Schneider Modicon Ladder Logic Upload/Downloadadmin/scada/multi_cip_command 2012-01-19 normal Allen-Bradley/Rockwell Automation EtherNet/IP CIP Commandsadmin/serverprotect/file normal TrendMicro ServerProtect File Accessadmin/smb/check_dir_file normal SMB Scanner Check File/Directory Utilityadmin/smb/list_directory normal SMB Directory Listing Utilityadmin/smb/psexec_command normal Microsoft Windows Authenticated Command Executionadmin/smb/samba_symlink_traversal normal Samba Symlink Directory Traversaladmin/smb/upload_file normal SMB File Upload Utilityadmin/sunrpc/solaris_kcms_readfile 2003-01-22 normal Solaris KCMS + TTDB Arbitrary File Readadmin/tftp/tftp_transfer_util normal TFTP File Transfer Utilityadmin/tikiwiki/tikidblib 2006-11-01 normal TikiWiki Information Disclosureadmin/vmware/poweroff_vm normal VMWare Power Off Virtual Machineadmin/vmware/poweron_vm normal VMWare Power On Virtual Machineadmin/vmware/tag_vm normal VMWare Tag Virtual Machineadmin/vmware/terminate_esx_sessions normal VMWare Terminate ESX Login Sessionsadmin/vnc/realvnc_41_bypass 2006-05-15 normal RealVNC NULL Authentication Mode Bypassadmin/vxworks/apple_airport_extreme_password normal Apple Airport Extreme Password Extraction (WDBRPC)admin/vxworks/dlink_i2eye_autoanswer normal D-Link i2eye Video Conference AutoAnswer (WDBRPC)admin/vxworks/wdbrpc_memory_dump normal VxWorks WDB Agent Remote Memory Dumpadmin/vxworks/wdbrpc_reboot normal VxWorks WDB Agent Remote Rebootadmin/webmin/edit_html_fileaccess 2012-09-06 normal Webmin edit_html.cgi file Parameter Traversal Arbitrary File Accessadmin/webmin/file_disclosure 2006-06-30 normal Webmin File Disclosureadmin/zend/java_bridge 2011-03-28 normal Zend Server Java Bridge Design Flaw Remote Code Executionanalyze/jtr_aix normal John the Ripper AIX Password Crackeranalyze/jtr_crack_fast normal John the Ripper Password Cracker (Fast Mode)analyze/jtr_linux normal John the Ripper Linux Password Crackeranalyze/jtr_mssql_fast normal John the Ripper MS SQL Password Cracker (Fast Mode)analyze/jtr_mysql_fast normal John the Ripper MySQL Password Cracker (Fast Mode)analyze/jtr_oracle_fast normal John the Ripper Oracle Password Cracker (Fast Mode)analyze/jtr_unshadow normal Unix Unshadow Utilityanalyze/postgres_md5_crack normal Postgres SQL md5 Password Crackerbnat/bnat_router normal BNAT Routerbnat/bnat_scan normal BNAT Scannerclient/smtp/emailer normal Generic Emailer (SMTP)crawler/msfcrawler normal Metasploit Web Crawlerdocx/word_unc_injector normal Microsoft Word UNC Path Injectordos/cisco/ios_http_percentpercent 2000-04-26 normal Cisco IOS HTTP GET /%% request Denial of Servicedos/dhcp/isc_dhcpd_clientid normal ISC DHCP Zero Length ClientID Denial of Service Moduledos/freebsd/nfsd/nfsd_mount normal FreeBSD Remote NFS RPC Request Denial of Servicedos/hp/data_protector_rds 2011-01-08 manual HP Data Protector Manager RDS DOSdos/http/3com_superstack_switch 2004-06-24 normal 3Com SuperStack Switch Denial of Servicedos/http/apache_mod_isapi 2010-03-05 normal Apache mod_isapi <= 2.2.14 Dangling Pointerdos/http/apache_range_dos 2011-08-19 normal Apache Range header DoS (Apache Killer)dos/http/apache_tomcat_transfer_encoding 2010-07-09 normal Apache Tomcat Transfer-Encoding Information Disclosure and DoSdos/http/dell_openmanage_post 2004-02-26 normal Dell OpenManage POST Request Heap Overflow (win32)dos/http/hashcollision_dos 2011-12-28 normal Hashtable Collisionsdos/http/novell_file_reporter_heap_bof 2012-11-16 normal NFR Agent Heap Overflow Vulnerabilitydos/http/sonicwall_ssl_format 2009-05-29 normal SonicWALL SSL-VPN Format String Vulnerabilitydos/http/webrick_regex 2008-08-08 normal Ruby WEBrick::HTTP::DefaultFileHandler DoSdos/mdns/avahi_portzero 2008-11-14 normal Avahi < 0.6.24 Source Port 0 DoSdos/ntp/ntpd_reserved_dos 2009-10-04 normal NTP.org ntpd Reserved Mode Denial of Servicedos/pptp/ms02_063_pptp_dos 2002-09-26 normal MS02-063 PPTP Malformed Control Data Kernel Denial of Servicedos/samba/lsa_addprivs_heap normal Samba lsa_io_privilege_set Heap Overflowdos/samba/lsa_transnames_heap normal Samba lsa_io_trans_names Heap Overflowdos/scada/beckhoff_twincat 2011-09-13 normal Beckhoff TwinCAT SCADA PLC 2.11.0.2004 DoSdos/scada/d20_tftp_overflow 2012-01-19 normal General Electric D20ME TFTP Server Buffer Overflow DoSdos/scada/igss9_dataserver 2011-12-20 normal 7-Technologies IGSS 9 IGSSdataServer.exe DoSdos/smtp/sendmail_prescan 2003-09-17 normal Sendmail SMTP Address prescan <= 8.12.8 Memory Corruptiondos/solaris/lpd/cascade_delete normal Solaris LPD Arbitrary File Deletedos/ssl/dtls_changecipherspec 2000-04-26 normal OpenSSL < 0.9.8i DTLS ChangeCipherSpec Remote DoSdos/syslog/rsyslog_long_tag 2011-09-01 normal rsyslog Long Tag Off-By-Two DoSdos/tcp/junos_tcp_opt manual Juniper JunOS Malformed TCP Optiondos/tcp/synflood normal TCP SYN Flooderdos/wifi/apple_orinoco_probe_response normal Apple Airport 802.11 Probe Response Kernel Memory Corruptiondos/wifi/cts_rts_flood normal Wireless CTS/RTS Flooderdos/wifi/deauth normal Wireless DEAUTH Flooderdos/wifi/fakeap normal Wireless Fake Access Point Beacon Flooddos/wifi/file2air normal Wireless Frame (File) Injectordos/wifi/netgear_ma521_rates normal NetGear MA521 Wireless Driver Long Rates Overflowdos/wifi/netgear_wg311pci normal NetGear WG311v1 Wireless Driver Long SSID Overflowdos/wifi/probe_resp_null_ssid normal Multiple Wireless Vendor NULL SSID Probe Responsedos/wifi/ssidlist_beacon normal Wireless Beacon SSID Emulatordos/wifi/wifun normal Wireless Test Moduledos/windows/appian/appian_bpm 2007-12-17 normal Appian Enterprise Business Suite 5.6 SP1 DoSdos/windows/browser/ms09_065_eot_integer 2009-11-10 normal Microsoft Windows EOT Font Table Directory Integer Overflowdos/windows/ftp/filezilla_admin_user 2005-11-07 normal FileZilla FTP Server Admin Interface Denial of Servicedos/windows/ftp/filezilla_server_port 2006-12-11 normal FileZilla FTP Server <=0.9.21 Malformed PORT Denial of Servicedos/windows/ftp/guildftp_cwdlist 2008-10-12 normal Guild FTPd 0.999.8.11/0.999.14 Heap Corruptiondos/windows/ftp/iis75_ftpd_iac_bof 2010-12-21 normal Microsoft IIS FTP Server Encoded Response Overflow Triggerdos/windows/ftp/iis_list_exhaustion 2009-09-03 normal Microsoft IIS FTP Server <= 7.0 LIST Stack Exhaustiondos/windows/ftp/solarftp_user 2011-02-22 normal Solar FTP Server <= 2.1.1 Malformed (User) Denial of Servicedos/windows/ftp/titan626_site 2008-10-14 normal Titan FTP Server 6.26.630 SITE WHO DoSdos/windows/ftp/vicftps50_list 2008-10-24 normal Victory FTP Server 5.0 LIST DoSdos/windows/ftp/winftp230_nlst 2008-09-26 normal WinFTP 2.3.0 NLST Denial of Servicedos/windows/ftp/xmeasy560_nlst 2008-10-13 normal XM Easy Personal FTP Server 5.6.0 NLST DoSdos/windows/ftp/xmeasy570_nlst 2009-03-27 normal XM Easy Personal FTP Server 5.7.0 NLST DoSdos/windows/games/kaillera 2011-07-02 normal Kaillera 0.86 Server Denial of Servicedos/windows/http/ms10_065_ii6_asp_dos 2010-09-14 normal Microsoft IIS 6.0 ASP Stack Exhaustion Denial of Servicedos/windows/http/pi3web_isapi 2008-11-13 normal Pi3Web <=2.0.13 ISAPI DoSdos/windows/llmnr/ms11_030_dnsapi 2011-04-12 normal Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun DoSdos/windows/nat/nat_helper 2006-10-26 normal Microsoft Windows NAT Helper Denial of Servicedos/windows/rdp/ms12_020_maxchannelids 2012-03-16 normal MS12-020 Microsoft Remote Desktop Use-After-Free DoSdos/windows/smb/ms05_047_pnp normal Microsoft Plug and Play Service Registry Overflowdos/windows/smb/ms06_035_mailslot 2006-07-11 normal Microsoft SRV.SYS Mailslot Write Corruptiondos/windows/smb/ms06_063_trans normal Microsoft SRV.SYS Pipe Transaction No Nulldos/windows/smb/ms09_001_write normal Microsoft SRV.SYS WriteAndX Invalid DataOffsetdos/windows/smb/ms09_050_smb2_negotiate_pidhigh normal Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereferencedos/windows/smb/ms09_050_smb2_session_logoff normal Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereferencedos/windows/smb/ms10_006_negotiate_response_loop normal Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loopdos/windows/smb/ms10_054_queryfs_pool_overflow normal Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoSdos/windows/smb/ms11_019_electbowser manual Microsoft Windows Browser Pool DoSdos/windows/smb/rras_vls_null_deref 2006-06-14 normal Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereferencedos/windows/smb/vista_negotiate_stop normal Microsoft Vista SP0 SMB Negotiate Protocol DoSdos/windows/smtp/ms06_019_exchange 2004-11-12 normal MS06-019 Exchange MODPROP Heap Overflowdos/windows/tftp/pt360_write 2008-10-29 normal PacketTrap TFTP Server 2.2.5459.0 DoSdos/windows/tftp/solarwinds 2010-05-21 normal SolarWinds TFTP Server 10.4.0.10 Denial of Servicedos/wireshark/chunked 2007-02-22 normal Wireshark chunked_encoding_dissector function DOSdos/wireshark/cldap 2011-03-01 normal Wireshark CLDAP Dissector DOSdos/wireshark/ldap 2008-03-28 normal Wireshark LDAP dissector DOSfuzzers/dns/dns_fuzzer normal DNS and DNSSEC Fuzzerfuzzers/ftp/client_ftp normal Simple FTP Client Fuzzerfuzzers/ftp/ftp_pre_post normal Simple FTP Fuzzerfuzzers/http/http_form_field normal HTTP Form Field Fuzzerfuzzers/http/http_get_uri_long normal HTTP GET Request URI Fuzzer (Incrementing Lengths)fuzzers/http/http_get_uri_strings normal HTTP GET Request URI Fuzzer (Fuzzer Strings)fuzzers/smb/smb2_negotiate_corrupt normal SMB Negotiate SMB2 Dialect Corruptionfuzzers/smb/smb_create_pipe normal SMB Create Pipe Request Fuzzerfuzzers/smb/smb_create_pipe_corrupt normal SMB Create Pipe Request Corruptionfuzzers/smb/smb_negotiate_corrupt normal SMB Negotiate Dialect Corruptionfuzzers/smb/smb_ntlm1_login_corrupt normal SMB NTLMv1 Login Request Corruptionfuzzers/smb/smb_tree_connect normal SMB Tree Connect Request Fuzzerfuzzers/smb/smb_tree_connect_corrupt normal SMB Tree Connect Request Corruptionfuzzers/smtp/smtp_fuzzer normal SMTP Simple Fuzzerfuzzers/ssh/ssh_kexinit_corrupt normal SSH Key Exchange Init Corruptionfuzzers/ssh/ssh_version_15 normal SSH 1.5 Version Fuzzerfuzzers/ssh/ssh_version_2 normal SSH 2.0 Version Fuzzerfuzzers/ssh/ssh_version_corrupt normal SSH Version Corruptionfuzzers/tds/tds_login_corrupt normal TDS Protocol Login Request Corruption Fuzzerfuzzers/tds/tds_login_username normal TDS Protocol Login Request Username Fuzzerfuzzers/wifi/fuzz_beacon normal Wireless Beacon Frame Fuzzerfuzzers/wifi/fuzz_proberesp normal Wireless Probe Response Frame Fuzzergather/android_htmlfileprovider normal Android Content Provider File Disclosuregather/checkpoint_hostname 2011-12-14 normal CheckPoint Firewall-1 SecuRemote Topology Service Hostname Disclosuregather/citrix_published_applications normal Citrix MetaFrame ICA Published Applications Scannergather/citrix_published_bruteforce normal Citrix MetaFrame ICA Published Applications Bruteforcergather/corpwatch_lookup_id normal CorpWatch Company ID Information Searchgather/corpwatch_lookup_name normal CorpWatch Company Name Information Searchgather/d20pass 2012-01-19 normal General Electric D20 Password Recoverygather/dns_bruteforce normal DNS Brutefoce Enumerationgather/dns_info normal DNS Basic Information Enumerationgather/dns_reverse_lookup normal DNS Reverse Lookup Enumerationgather/dns_srv_enum normal DNS Common Service Record Enumerationgather/eaton_nsm_creds 2012-06-26 normal Network Shutdown Module <= 3.21 (sort_values) Credential Dumpergather/enum_dns normal DNS Record Scanner and Enumerator gather/impersonate_ssl normal HTTP SSL Certificate Impersonationgather/natpmp_external_address normal NAT-PMP External Address Scannergather/search_email_collector normal Search Engine Domain Email Address Collectorgather/shodan_search normal Shodan Searchgather/wp_w3_total_cache_hash_extract normal W3-Total-Cache WordPress-plugin 0.9.2.4 (or before) Username and Hash Extractgather/xbmc_traversal 2012-11-04 normal XBMC Web Server Directory Traversalpdf/foxit/authbypass 2009-03-09 normal Foxit Reader Authorization Bypassscanner/afp/afp_login normal Apple Filing Protocol Login Utilityscanner/afp/afp_server_info normal Apple Filing Protocol Info Enumeratorscanner/backdoor/energizer_duo_detect normal Energizer DUO Trojan Scannerscanner/db2/db2_auth normal DB2 Authentication Brute Force Utilityscanner/db2/db2_version normal DB2 Probe Utilityscanner/db2/discovery normal DB2 Discovery Service Detectionscanner/dcerpc/endpoint_mapper normal Endpoint Mapper Service Discoveryscanner/dcerpc/hidden normal Hidden DCERPC Service Discoveryscanner/dcerpc/management normal Remote Management Interface Discoveryscanner/dcerpc/tcp_dcerpc_auditor normal DCERPC TCP Service Auditorscanner/dect/call_scanner normal DECT Call Scannerscanner/dect/station_scanner normal DECT Base Station Scannerscanner/discovery/arp_sweep normal ARP Sweep Local Network Discoveryscanner/discovery/ipv6_multicast_ping normal IPv6 Link Local/Node Local Ping Discoveryscanner/discovery/ipv6_neighbor normal IPv6 Local Neighbor Discoveryscanner/discovery/ipv6_neighbor_router_advertisement normal IPv6 Local Neighbor Discovery Using Router Advertisementscanner/discovery/udp_probe normal UDP Service Proberscanner/discovery/udp_sweep normal UDP Service Sweeperscanner/emc/alphastor_devicemanager normal EMC AlphaStor Device Manager Servicescanner/emc/alphastor_librarymanager normal EMC AlphaStor Library Manager Servicescanner/finger/finger_users normal Finger Service User Enumeratorscanner/ftp/anonymous normal Anonymous FTP Access Detectionscanner/ftp/ftp_login normal FTP Authentication Scannerscanner/ftp/ftp_version normal FTP Version Scannerscanner/ftp/titanftp_xcrc_traversal 2010-06-15 normal Titan FTP XCRC Directory Traversal Information Disclosurescanner/h323/h323_version normal H.323 Version Scannerscanner/http/adobe_xml_inject normal Adobe XML External Entity Injectionscanner/http/apache_activemq_source_disclosure normal Apache ActiveMQ JSP files Source Disclosurescanner/http/apache_activemq_traversal normal Apache ActiveMQ Directory Traversalscanner/http/apache_userdir_enum normal Apache "mod_userdir" User Enumerationscanner/http/atlassian_crowd_fileaccess normal Atlassian Crowd XML Entity Expansion Remote File Accessscanner/http/axis_local_file_include normal Apache Axis2 v1.4.1 Local File Inclusionscanner/http/axis_login normal Apache Axis2 v1.4.1 Brute Force Utilityscanner/http/backup_file normal HTTP Backup File Scannerscanner/http/barracuda_directory_traversal 2010-10-08 normal Barracuda Multiple Product "locale" Directory Traversalscanner/http/bitweaver_overlay_type_traversal 2012-10-23 normal Bitweaver overlay_type Directory Traversalscanner/http/blind_sql_query normal HTTP Blind SQL Injection Scannerscanner/http/brute_dirs normal HTTP Directory Brute Force Scannerscanner/http/cert normal HTTP SSL Certificate Checkerscanner/http/cisco_device_manager 2000-10-26 normal Cisco Device HTTP Device Manager Accessscanner/http/cisco_ios_auth_bypass 2001-06-27 normal Cisco IOS HTTP Unauthorized Administrative Accessscanner/http/cisco_nac_manager_traversal normal Cisco Network Access Manager Directory Traversal Vulnerabilityscanner/http/clansphere_traversal 2012-10-23 normal ClanSphere 2011.3 Local File Inclusion Vulnerabilityscanner/http/cold_fusion_version normal ColdFusion Version Scannerscanner/http/coldfusion_locale_traversal normal ColdFusion Server Checkscanner/http/concrete5_member_list normal Concrete5 Member List Enumerationscanner/http/copy_of_file normal HTTP Copy File Scannerscanner/http/crawler normal Web Site Crawlerscanner/http/dell_idrac normal Dell iDRAC default Loginscanner/http/dir_listing normal HTTP Directory Listing Scannerscanner/http/dir_scanner normal HTTP Directory Scannerscanner/http/dir_webdav_unicode_bypass normal MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scannerscanner/http/dolibarr_login normal Dolibarr ERP & CRM 3 Login Utilityscanner/http/drupal_views_user_enum 2010-07-02 normal Drupal Views Module Users Enumerationscanner/http/ektron_cms400net normal Ektron CMS400.NET Default Password Scannerscanner/http/enum_wayback normal Archive.org Stored Domain URLsscanner/http/error_sql_injection normal HTTP Error Based SQL Injection Scannerscanner/http/file_same_name_dir normal HTTP File Same Name Directory Scannerscanner/http/files_dir normal HTTP Interesting File Scannerscanner/http/frontpage_login normal FrontPage Server Extensions Anonymous Login Scannerscanner/http/glassfish_login normal GlassFish Brute Force Utilityscanner/http/groupwise_agents_http_traversal normal Novell Groupwise Agents HTTP Directory Traversalscanner/http/hp_sitescope_getfileinternal_fileaccess normal HP SiteScope SOAP Call getFileInternal Remote File Accessscanner/http/hp_sitescope_getsitescopeconfiguration normal HP SiteScope SOAP Call getSiteScopeConfiguration Configuration Accessscanner/http/hp_sitescope_loadfilecontent_fileaccess normal HP SiteScope SOAP Call loadFileContent Remote File Accessscanner/http/http_hsts normal HTTP Strict Transport Security (HSTS) Detectionscanner/http/http_login normal HTTP Login Utilityscanner/http/http_put normal HTTP Writable Path PUT/DELETE File Accessscanner/http/http_traversal normal Generic HTTP Directory Traversal Utilityscanner/http/http_version normal HTTP Version Detectionscanner/http/httpbl_lookup normal Http:BL Lookupscanner/http/iis_internal_ip normal Microsoft IIS HTTP Internal IP Disclosurescanner/http/jboss_vulnscan normal JBoss Vulnerability Scannerscanner/http/joomla_pages normal Joomla Page Scannerscanner/http/joomla_plugins normal Joomla Plugins Scannerscanner/http/joomla_version normal Joomla Version Scannerscanner/http/litespeed_source_disclosure normal LiteSpeed Source Code Disclosure/Downloadscanner/http/lucky_punch normal HTTP Microsoft SQL Injection Table XSS Infectionscanner/http/majordomo2_directory_traversal 2011-03-08 normal Majordomo2 _list_file_get() Directory Traversalscanner/http/manageengine_deviceexpert_traversal 2012-03-18 normal ManageEngine DeviceExpert 5.6 ScheduleResultViewer FileName Traversalscanner/http/manageengine_securitymanager_traversal 2012-10-19 normal ManageEngine SecurityManager Plus 5.5 Directory Traversalscanner/http/mod_negotiation_brute normal Apache HTTPD mod_negotiation Filename Bruterscanner/http/mod_negotiation_scanner normal Apache HTTPD mod_negotiation Scannerscanner/http/ms09_020_webdav_unicode_bypass normal MS09-020 IIS6 WebDAV Unicode Authentication Bypassscanner/http/netdecision_traversal 2012-03-07 normal NetDecision NOCVision Server Directory Traversalscanner/http/nginx_source_disclosure normal Nginx Source Code Disclosure/Downloadscanner/http/novell_file_reporter_fsfui_fileaccess 2012-11-16 normal NFR Agent FSFUI Record Arbitrary Remote File Accessscanner/http/novell_file_reporter_srs_fileaccess 2012-11-16 normal NFR Agent SRS Record Arbitrary Remote File Accessscanner/http/open_proxy normal HTTP Open Proxy Detectionscanner/http/options normal HTTP Options Detectionscanner/http/owa_login normal Outlook Web App (OWA) Brute Force Utilityscanner/http/prev_dir_same_name_file normal HTTP Previous Directory File Scannerscanner/http/rails_json_yaml_scanner normal Ruby on Rails JSON Processor YAML Deserialization Scannerscanner/http/rails_mass_assignment normal Ruby On Rails Attributes Mass Assignment Scannerscanner/http/rails_xml_yaml_scanner normal Ruby on Rails XML Processor YAML Deserialization Scannerscanner/http/replace_ext normal HTTP File Extension Scannerscanner/http/rewrite_proxy_bypass normal Apache Reverse Proxy Bypass Vulnerability Scannerscanner/http/robots_txt normal HTTP Robots.txt Content Scannerscanner/http/s40_traversal 2011-04-07 normal S40 0.4.2 CMS Directory Traversal Vulnerabilityscanner/http/sap_businessobjects_user_brute normal SAP BusinessObjects User Bruteforcerscanner/http/sap_businessobjects_user_brute_web normal SAP BusinessObjects Web User Bruteforcerscanner/http/sap_businessobjects_user_enum normal SAP BusinessObjects User Enumerationscanner/http/sap_businessobjects_version_enum normal SAP BusinessObjects Version Detectionscanner/http/scraper normal HTTP Page Scraperscanner/http/simple_webserver_traversal 2013-01-03 normal Simple Web Server 2.3-RC1 Directory Traversalscanner/http/soap_xml normal HTTP SOAP Verb/Noun Brute Force Scannerscanner/http/sockso_traversal 2012-03-14 normal Sockso Music Host Server 1.5 Directory Traversalscanner/http/splunk_web_login normal Splunk Web interface Login Utilityscanner/http/sqlmap normal SQLMAP SQL Injection External Modulescanner/http/squid_pivot_scanning normal Squid Proxy Port Scannerscanner/http/squiz_matrix_user_enum 2011-11-08 normal Squiz Matrix User Enumeration Scannerscanner/http/ssl normal HTTP SSL Certificate Informationscanner/http/svn_scanner normal HTTP Subversion Scannerscanner/http/svn_wcdb_scanner normal SVN wc.db Scannerscanner/http/sybase_easerver_traversal 2011-05-25 normal Sybase Easerver 6.3 Directory Traversalscanner/http/symantec_brightmail_logfile 2012-11-30 normal Symantec Messaging Gateway 9.5 Log File Download Vulnerabilityscanner/http/titan_ftp_admin_pwd normal Titan FTP Administrative Password Disclosurescanner/http/tomcat_enum normal Apache Tomcat User Enumerationscanner/http/tomcat_mgr_login normal Tomcat Application Manager Login Utilityscanner/http/trace normal HTTP TRACE Detectionscanner/http/trace_axd normal HTTP trace.axd Content Scannerscanner/http/vcms_login normal V-CMS Login Utilityscanner/http/verb_auth_bypass normal HTTP Verb Authentication Bypass Scannerscanner/http/vhost_scanner normal HTTP Virtual Host Brute Force Scannerscanner/http/vmware_server_dir_trav normal VMware Server Directory Traversal Vulnerabilityscanner/http/vmware_update_manager_traversal 2011-11-21 normal VMWare Update Manager 4 Directory Traversalscanner/http/wangkongbao_traversal normal WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversalscanner/http/web_vulndb normal HTTP Vuln Scannerscanner/http/webdav_internal_ip normal HTTP WebDAV Internal IP Scannerscanner/http/webdav_scanner normal HTTP WebDAV Scannerscanner/http/webdav_website_content normal HTTP WebDAV Website Content Scannerscanner/http/webpagetest_traversal 2012-07-13 normal WebPageTest Directory Traversalscanner/http/wordpress_login_enum normal WordPress Brute Force and User Enumeration Utilityscanner/http/wordpress_pingback_access normal WordPress Pingback Locatorscanner/http/xpath normal HTTP Blind XPATH 1.0 Injectorscanner/http/yaws_traversal 2011-11-25 normal Yaws Web Server Directory Traversalscanner/http/zenworks_assetmanagement_fileaccess normal Novell ZENworks Asset Management 7.5 Remote File Accessscanner/http/zenworks_assetmanagement_getconfig normal Novell ZENworks Asset Management 7.5 Configuration Accessscanner/imap/imap_version normal IMAP4 Banner Grabberscanner/ip/ipidseq normal IPID Sequence Scannerscanner/lotus/lotus_domino_hashes normal Lotus Domino Password Hash Collectorscanner/lotus/lotus_domino_login normal Lotus Domino Brute Force Utilityscanner/lotus/lotus_domino_version normal Lotus Domino Versionscanner/misc/cctv_dvr_login normal CCTV DVR Login Scanning Utilityscanner/misc/dvr_config_disclosure normal Multiple DVR Manufacturers Configuration Disclosurescanner/misc/ib_service_mgr_info normal Borland InterBase Services Manager Informationscanner/misc/java_rmi_server 2011-10-15 normal Java RMI Server Insecure Endpoint Code Execution Scannerscanner/misc/oki_scanner normal OKI Printer Default Login Credential Scannerscanner/misc/raysharp_dvr_passwords normal Ray Sharp DVR Password Retrieverscanner/misc/redis_server normal Redis-server Scannerscanner/misc/rosewill_rxs3211_passwords normal Rosewill RXS-3211 IP Camera Password Retrieverscanner/misc/sunrpc_portmapper normal SunRPC Portmap Program Enumeratorscanner/misc/zenworks_preboot_fileaccess normal Novell ZENworks Configuration Management Preboot Service Remote File Accessscanner/mongodb/mongodb_login normal MongoDB Login Utilityscanner/motorola/timbuktu_udp 2009-09-25 normal Motorola Timbuktu Service Detectionscanner/msf/msf_rpc_login normal Metasploit RPC Interface Login Utilityscanner/msf/msf_web_login normal Metasploit Web interface Login Utilityscanner/mssql/mssql_hashdump normal MSSQL Password Hashdumpscanner/mssql/mssql_login normal MSSQL Login Utilityscanner/mssql/mssql_ping normal MSSQL Ping Utilityscanner/mssql/mssql_schemadump normal MSSQL Schema Dumpscanner/mysql/mysql_authbypass_hashdump 2012-06-09 normal MySQL Authentication Bypass Password Dumpscanner/mysql/mysql_file_enum normal MYSQL File/Directory Enumeratorscanner/mysql/mysql_hashdump normal MYSQL Password Hashdumpscanner/mysql/mysql_login normal MySQL Login Utilityscanner/mysql/mysql_schemadump normal MYSQL Schema Dumpscanner/mysql/mysql_version normal MySQL Server Version Enumerationscanner/natpmp/natpmp_portscan normal NAT-PMP External Port Scannerscanner/nessus/nessus_ntp_login normal Nessus NTP Login Utilityscanner/nessus/nessus_xmlrpc_login normal Nessus XMLRPC Interface Login Utilityscanner/nessus/nessus_xmlrpc_ping normal Nessus XMLRPC Interface Ping Utilityscanner/netbios/nbname normal NetBIOS Information Discoveryscanner/netbios/nbname_probe normal NetBIOS Information Discovery Proberscanner/nexpose/nexpose_api_login normal NeXpose API Interface Login Utilityscanner/nfs/nfsmount normal NFS Mount Scannerscanner/ntp/ntp_monlist normal NTP Monitor List Scannerscanner/ntp/ntp_readvar normal NTP Clock Variables Disclosurescanner/openvas/openvas_gsad_login normal OpenVAS gsad Web interface Login Utilityscanner/openvas/openvas_omp_login normal OpenVAS OMP Login Utilityscanner/openvas/openvas_otp_login normal OpenVAS OTP Login Utilityscanner/oracle/emc_sid normal Oracle Enterprise Manager Control SID Discoveryscanner/oracle/isqlplus_login normal Oracle iSQL*Plus Login Utilityscanner/oracle/isqlplus_sidbrute normal Oracle isqlplus SID Checkscanner/oracle/oracle_hashdump normal Oracle Password Hashdumpscanner/oracle/oracle_login normal Oracle RDBMS Login Utilityscanner/oracle/sid_brute normal Oracle TNS Listener SID Bruteforcescanner/oracle/sid_enum 2009-01-07 normal Oracle TNS Listener SID Enumerationscanner/oracle/spy_sid normal Oracle Application Server Spy Servlet SID Enumerationscanner/oracle/tnslsnr_version 2009-01-07 normal Oracle TNS Listener Service Version Queryscanner/oracle/xdb_sid normal Oracle XML DB SID Discoveryscanner/oracle/xdb_sid_brute normal Oracle XML DB SID Discovery via Brute Forcescanner/pcanywhere/pcanywhere_login normal PcAnywhere Login Scannerscanner/pcanywhere/pcanywhere_tcp normal PcAnywhere TCP Service Discoveryscanner/pcanywhere/pcanywhere_udp normal PcAnywhere UDP Service Discoveryscanner/pop3/pop3_login normal POP3 Login Utilityscanner/pop3/pop3_version normal POP3 Banner Grabberscanner/portscan/ack normal TCP ACK Firewall Scannerscanner/portscan/ftpbounce normal FTP Bounce Port Scannerscanner/portscan/syn normal TCP SYN Port Scannerscanner/portscan/tcp normal TCP Port Scannerscanner/portscan/xmas normal TCP "XMas" Port Scannerscanner/postgres/postgres_hashdump normal Postgres Password Hashdumpscanner/postgres/postgres_login normal PostgreSQL Login Utilityscanner/postgres/postgres_schemadump normal Postgres Schema Dumpscanner/postgres/postgres_version normal PostgreSQL Version Probescanner/rdp/ms12_020_check normal MS12-020 Microsoft Remote Desktop Checkerscanner/rogue/rogue_recv normal Rogue Gateway Detection: Receiverscanner/rogue/rogue_send normal Rogue Gateway Detection: Senderscanner/rservices/rexec_login normal rexec Authentication Scannerscanner/rservices/rlogin_login normal rlogin Authentication Scannerscanner/rservices/rsh_login normal rsh Authentication Scannerscanner/sap/sap_icm_urlscan normal SAP URL Scannerscanner/sap/sap_mgmt_con_abaplog normal SAP Management Console ABAP syslogscanner/sap/sap_mgmt_con_brute_login normal SAP Management Console Brute Forcescanner/sap/sap_mgmt_con_extractusers normal SAP Management Console Extract Usersscanner/sap/sap_mgmt_con_getaccesspoints normal SAP Management Console Get Access Pointsscanner/sap/sap_mgmt_con_getenv normal SAP Management Console getEnvironmentscanner/sap/sap_mgmt_con_getlogfiles normal SAP Management Console Get Logfilescanner/sap/sap_mgmt_con_getprocesslist normal SAP Management Console GetProcessListscanner/sap/sap_mgmt_con_getprocessparameter normal SAP Management Console Get Process Parametersscanner/sap/sap_mgmt_con_instanceproperties normal SAP Management Console Instance Propertiesscanner/sap/sap_mgmt_con_listlogfiles normal SAP Management Console List Logfilesscanner/sap/sap_mgmt_con_startprofile normal SAP Management Console getStartProfilescanner/sap/sap_mgmt_con_version normal SAP Management Console Version Detectionscanner/sap/sap_router_info_request normal SAPRouter Admin Requestscanner/sap/sap_service_discovery normal SAP Service Discoveryscanner/sap/sap_soap_bapi_user_create1 normal SAP /sap/bc/soap/rfc SOAP Service BAPI_USER_CREATE1 Function User Creationscanner/sap/sap_soap_rfc_brute_login normal SAP /sap/bc/soap/rfc SOAP Service RFC_PING Login Brute Forcerscanner/sap/sap_soap_rfc_dbmcli_sxpg_call_system_command_exec normal SAP /sap/bc/soap/rfc SOAP Service SXPG_CALL_SYSTEM Function Command Injectionscanner/sap/sap_soap_rfc_dbmcli_sxpg_command_exec normal SAP /sap/bc/soap/rfc SOAP Service SXPG_COMMAND_EXEC Function Command Injectionscanner/sap/sap_soap_rfc_ping normal SAP /sap/bc/soap/rfc SOAP Service RFC_PING Function Service Discoveryscanner/sap/sap_soap_rfc_read_table normal SAP /sap/bc/soap/rfc SOAP Service RFC_READ_TABLE Function Dump Datascanner/sap/sap_soap_rfc_susr_rfc_user_interface normal SAP /sap/bc/soap/rfc SOAP Service SUSR_RFC_USER_INTERFACE Function User Creationscanner/sap/sap_soap_rfc_sxpg_call_system_exec normal SAP /sap/bc/soap/rfc SOAP Service SXPG_CALL_SYSTEM Function Command Executionscanner/sap/sap_soap_rfc_sxpg_command_exec normal SAP SOAP RFC SXPG_COMMAND_EXECUTEscanner/sap/sap_soap_rfc_system_info normal SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gatheringscanner/sap/sap_soap_th_saprel_disclosure normal SAP /sap/bc/soap/rfc SOAP Service TH_SAPREL Function Information Disclosurescanner/sap/sap_web_gui_brute_login normal SAP Web GUI Login Brute Forcerscanner/scada/digi_addp_reboot normal Digi ADDP Remote Reboot Initiatorscanner/scada/digi_addp_version normal Digi ADDP Information Discoveryscanner/scada/digi_realport_serialport_scan normal Digi RealPort Serial Server Port Scannerscanner/scada/digi_realport_version normal Digi RealPort Serial Server Versionscanner/scada/indusoft_ntwebserver_fileaccess normal Indusoft WebStudio NTWebServer Remote File Accessscanner/scada/koyo_login 2012-01-19 normal Koyo DirectLogic PLC Password Brute Force Utilityscanner/scada/modbus_findunitid 2012-10-28 normal Modbus Unit ID and Station ID Enumeratorscanner/scada/modbusclient 2011-11-01 normal Modbus Client Utilityscanner/scada/modbusdetect 2011-11-01 normal Modbus Version Scannerscanner/scada/sielco_winlog_fileaccess normal Sielco Sistemi Winlog Remote File Accessscanner/sip/enumerator normal SIP Username Enumerator (UDP)scanner/sip/enumerator_tcp normal SIP Username Enumerator (TCP)scanner/sip/options normal SIP Endpoint Scanner (UDP)scanner/sip/options_tcp normal SIP Endpoint Scanner (TCP)scanner/sip/sipdroid_ext_enum normal SIPDroid Extension Grabberscanner/smb/pipe_auditor normal SMB Session Pipe Auditorscanner/smb/pipe_dcerpc_auditor normal SMB Session Pipe DCERPC Auditorscanner/smb/psexec_loggedin_users normal Microsoft Windows Authenticated Logged In Users Enumerationscanner/smb/smb2 normal SMB 2.0 Protocol Detectionscanner/smb/smb_enumshares normal SMB Share Enumerationscanner/smb/smb_enumusers normal SMB User Enumeration (SAM EnumUsers)scanner/smb/smb_enumusers_domain normal SMB Domain User Enumerationscanner/smb/smb_login normal SMB Login Check Scannerscanner/smb/smb_lookupsid normal SMB Local User Enumeration (LookupSid)scanner/smb/smb_version normal SMB Version Detectionscanner/smtp/smtp_enum normal SMTP User Enumeration Utilityscanner/smtp/smtp_version normal SMTP Banner Grabberscanner/snmp/aix_version normal AIX SNMP Scanner Auxiliary Modulescanner/snmp/cisco_config_tftp normal Cisco IOS SNMP Configuration Grabber (TFTP)scanner/snmp/cisco_upload_file normal Cisco IOS SNMP File Upload (TFTP)scanner/snmp/snmp_enum normal SNMP Enumeration Modulescanner/snmp/snmp_enumshares normal SNMP Windows SMB Share Enumerationscanner/snmp/snmp_enumusers normal SNMP Windows Username Enumerationscanner/snmp/snmp_login normal SNMP Community Scannerscanner/snmp/snmp_set normal SNMP Set Modulescanner/snmp/xerox_workcentre_enumusers normal Xerox WorkCentre User Enumeration (SNMP)scanner/ssh/ssh_identify_pubkeys normal SSH Public Key Acceptance Scannerscanner/ssh/ssh_login normal SSH Login Check Scannerscanner/ssh/ssh_login_pubkey normal SSH Public Key Login Scannerscanner/ssh/ssh_version normal SSH Version Scannerscanner/telephony/wardial normal Wardialerscanner/telnet/lantronix_telnet_password normal Lantronix Telnet Password Recoveryscanner/telnet/lantronix_telnet_version normal Lantronix Telnet Service Banner Detectionscanner/telnet/telnet_encrypt_overflow normal Telnet Service Encyption Key ID Overflow Detectionscanner/telnet/telnet_login normal Telnet Login Check Scannerscanner/telnet/telnet_ruggedcom normal RuggedCom Telnet Password Generatorscanner/telnet/telnet_version normal Telnet Service Banner Detectionscanner/tftp/ipswitch_whatsupgold_tftp 2011-12-12 normal IpSwitch WhatsUp Gold TFTP Directory Traversalscanner/tftp/netdecision_tftp 2009-05-16 normal NetDecision 4.2 TFTP Directory Traversalscanner/tftp/tftpbrute normal TFTP Brute Forcerscanner/upnp/ssdp_msearch normal UPnP SSDP M-SEARCH Information Discoveryscanner/vmware/esx_fingerprint normal VMWare ESX/ESXi Fingerprint Scannerscanner/vmware/vmauthd_login normal VMWare Authentication Daemon Login Scannerscanner/vmware/vmauthd_version normal VMWare Authentication Daemon Version Scannerscanner/vmware/vmware_enum_permissions normal VMWare Enumerate Permissionsscanner/vmware/vmware_enum_sessions normal VMWare Enumerate Active Sessionsscanner/vmware/vmware_enum_users normal VMWare Enumerate User Accountsscanner/vmware/vmware_enum_vms normal VMWare Enumerate Virtual Machinesscanner/vmware/vmware_host_details normal VMWare Enumerate Host Detailsscanner/vmware/vmware_http_login normal VMWare Web Login Scannerscanner/vmware/vmware_screenshot_stealer normal VMWare Screenshot Stealerscanner/vnc/vnc_login normal VNC Authentication Scannerscanner/vnc/vnc_none_auth normal VNC Authentication None Detectionscanner/voice/recorder normal Telephone Line Voice Scannerscanner/vxworks/wdbrpc_bootline normal VxWorks WDB Agent Boot Parameter Scannerscanner/vxworks/wdbrpc_version normal VxWorks WDB Agent Version Scannerscanner/winrm/winrm_auth_methods normal WinRM Authentication Method Detectionscanner/winrm/winrm_cmd normal WinRM Command Runnerscanner/winrm/winrm_login normal WinRM Login Utilityscanner/winrm/winrm_wql normal WinRM WQL Query Runnerscanner/x11/open_x11 normal X11 No-Auth Scannerserver/browser_autopwn normal HTTP Client Automatic Exploiterserver/capture/drda normal Authentication Capture: DRDA (DB2, Informix, Derby)server/capture/ftp normal Authentication Capture: FTPserver/capture/http normal Authentication Capture: HTTPserver/capture/http_basic normal HTTP Client Basic Authentication Credential Collectorserver/capture/http_javascript_keylogger normal Capture: HTTP JavaScript Keyloggerserver/capture/http_ntlm normal HTTP Client MS Credential Catcherserver/capture/imap normal Authentication Capture: IMAPserver/capture/mssql normal Authentication Capture: MSSQLserver/capture/mysql normal Authentication Capture: MySQLserver/capture/pop3 normal Authentication Capture: POP3server/capture/postgresql normal Authentication Capture: PostgreSQLserver/capture/printjob_capture normal Printjob Capture Serviceserver/capture/sip normal Authentication Capture: SIPserver/capture/smb normal Authentication Capture: SMBserver/capture/smtp normal Authentication Capture: SMTPserver/capture/telnet normal Authentication Capture: Telnetserver/capture/vnc normal Authentication Capture: VNCserver/dhcp normal DHCP Serverserver/dns/spoofhelper normal DNS Spoofing Helper Serviceserver/fakedns normal Fake DNS Serviceserver/ftp normal FTP File Serverserver/http_ntlmrelay normal HTTP Client MS Credential Relayerserver/icmp_exfil normal ICMP Exfiltration Serviceserver/pxexploit normal PXE Boot Exploit Serverserver/socks4a normal Socks4a Proxy Serverserver/socks_unc normal SOCKS Proxy UNC Path Redirectionserver/tftp normal TFTP File Serverserver/webkit_xslt_dropper normal Cross Platform Webkit File Dropperserver/wpad normal WPAD.dat File Serversniffer/psnuffle normal pSnuffle Packet Snifferspoof/arp/arp_poisoning 1999-12-22 normal ARP Spoofspoof/cisco/dtp normal Forge Cisco DTP Packetsspoof/dns/bailiwicked_domain 2008-07-21 normal DNS BailiWicked Domain Attackspoof/dns/bailiwicked_host 2008-07-21 normal DNS BailiWicked Host Attackspoof/dns/compare_results 2008-07-21 normal DNS Lookup Result Comparisonspoof/llmnr/llmnr_response normal LLMNR Spooferspoof/nbns/nbns_response normal NetBIOS Name Service Spooferspoof/replay/pcap_replay normal Pcap Replay Utilityspoof/wifi/airpwn normal Airpwn TCP Hijackspoof/wifi/dnspwn normal DNSpwn DNS Hijacksqli/oracle/dbms_cdc_ipublish 2008-10-22 normal Oracle DB SQL Injection via SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCEsqli/oracle/dbms_cdc_publish 2008-10-22 normal Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCEsqli/oracle/dbms_cdc_publish2 2010-04-26 normal Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCEsqli/oracle/dbms_cdc_publish3 2010-10-13 normal Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SETsqli/oracle/dbms_cdc_subscribe_activate_subscription 2005-04-18 normal Oracle DB SQL Injection via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTIONsqli/oracle/dbms_export_extension 2006-04-26 normal Oracle DB SQL Injection via DBMS_EXPORT_EXTENSIONsqli/oracle/dbms_metadata_get_granted_xml 2008-01-05 normal Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_GRANTED_XMLsqli/oracle/dbms_metadata_get_xml 2008-01-05 normal Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_XMLsqli/oracle/dbms_metadata_open 2008-01-05 normal Oracle DB SQL Injection via SYS.DBMS_METADATA.OPENsqli/oracle/droptable_trigger 2009-01-13 normal Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Triggersqli/oracle/jvm_os_code_10g 2010-02-01 normal Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Executionsqli/oracle/jvm_os_code_11g 2010-02-01 normal Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Executionsqli/oracle/lt_compressworkspace 2008-10-13 normal Oracle DB SQL Injection via SYS.LT.COMPRESSWORKSPACEsqli/oracle/lt_findricset_cursor 2007-10-17 normal Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Methodsqli/oracle/lt_mergeworkspace 2008-10-22 normal Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACEsqli/oracle/lt_removeworkspace 2008-10-13 normal Oracle DB SQL Injection via SYS.LT.REMOVEWORKSPACEsqli/oracle/lt_rollbackworkspace 2009-05-04 normal Oracle DB SQL Injection via SYS.LT.ROLLBACKWORKSPACEvoip/asterisk_login normal Asterisk Manager Login Utilityvoip/sip_deregister normal SIP Deregister Extensionvoip/sip_invite_spoof normal SIP Invite Spoofvsploit/malware/dns/dns_mariposa normal VSploit Mariposa DNS Query Modulevsploit/malware/dns/dns_query normal VSploit DNS Beaconing Emulationvsploit/malware/dns/dns_zeus normal VSploit Zeus DNS Query Modulevsploit/pii/email_pii normal VSploit Email PIIvsploit/pii/web_pii normal VSploit Web PII
这个命令会显示所有的辅助模块以及他们的用途。在Metasploit中,辅助模块的用途非常广泛,它们可以是扫描器、拒绝服务攻击工具、Fuzz测试器,以及其他类型的工具。
3. msf > show options
当你选择了一个模块,并输入msf > show options 后,会列出这个模块所需的各种参数。如果当你没有选择任何模块,那么输入这个命令会显示所有的全局参数。
4. msf > show payloads
该命令会将与的那个钱模块兼容的攻击载荷显示出来
5. setg和unsetg命令能够对全局参数进行设置或者清除。使用这组命令会让你不必每次遇到某个参数都要从新设置。
6. save 在使用setg命令对全局参数进行设置后,可以用save命令将当前的设置保存闲来,这样在下次启动MSF终端时还可以使用这些设置值,在Metasploit中,可以在任何时候输入save命令保存当前的状态。
转载于:https://www.cnblogs.com/evilxr/p/3843260.html