Malwarebytes Anti-Malware / Anti-Exploit Update Remote Code Execution Exploit

This Metasploit module exploits a vulnerability in the update functionality of Malwarebytes Anti-Malware consumer before 2.0.3 and Malwarebytes Anti-Exploit consumer 1.03.1.1220. Due to the lack of proper update package validation a man-in-the-middle attacker could execute arbitrary code by...

Malwarebytes Anti-Malware < 2.0.3 'Upgrade' MITM Vulnerability - Windows

Malwarebytes Anti-Malware is prone to a man-in-the-middle MITM vulnerability through it SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Malwarebytes Anti-Exploit < 1.04.1.1012 'Upgrade' MITM Vulnerability - Windows

Malwarebytes Anti-Exploit is prone to a man-in-the-middle MITM vulnerability through it SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-4936

CVE-2014-4936 affects Malwarebytes Anti-Malware (MBAM) consumer pre-2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer ≤1.04.1.1012. Multiple public and security feeds describe a MITM vulnerability in the update mechanism: an attacker spoofing the update server can upload and execute arbitrary c...

Malwarebytes Anti-Malware and Anti-Exploit Update Remote Code Execution

This module exploits a vulnerability in the update functionality of Malwarebytes Anti-Malware consumer before 2.0.3 and Malwarebytes Anti-Exploit consumer 1.03.1.1220. Due to the lack of proper update package validation, a man-in-the-middle MITM attacker could execute arbitrary code by spoofing t...

CVE-2014-4936

creationtimestamp| type| source ---|---|--- 2014-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41701 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/malwarebytesupdateexec.rb 2025-02-06...

openSUSE Security Update : ldapsmb (openSUSE-SU-2011:0998-1)

A Cross-Site Request Forgery CSRF and a Cross Site Scripting vulnerability have been fixed in samba's SWAT. CVE-2011-2522 and CVE-2011-2694 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Amazon Linux AMI : wireshark (ALAS-2013-251)

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2013-3559 , CVE-2013-4083 Several denial of service flaws were found in Wireshark. Wireshar...

CVE-2013-4936

The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2013-4936

The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2013-4936

Wireshark 1.10.x before 1.10.1 is affected by CVE-2013-4936: the IsDFP_Frame function in the PROFINET Real-Time dissector (plugins/profinet/packet-pn-rt.c) does not validate MAC addresses, enabling remote attackers to trigger a denial of service via a crafted packet (NULL pointer dereference and ...

CVE-2012-4936

CVE-2012-4936 concerns Pattern Insight 2.3, whose web interface is vulnerable to clickjacking via a FRAME element. The CVE description from NVD states that remote attackers can conduct clickjacking against the Pattern Insight web interface, with the effect of framing the application and potential...

CVE-2010-4936

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4936

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4936

CVE-2010-4936 affects the Joomla! Slide Show (com_slideshow) component. The vulnerability is an SQL injection exposed via the catid parameter to index.php, allowing remote attackers to execute arbitrary SQL commands. The data sources describe the affected component and vulnerability class consist...

CVE-2009-4936

CVE-2009-4936 affects Small Pirate (SPirate) 2.1 with multiple SQL injection vulnerabilities. Remote attackers can inject through the id parameter in: (1) the default URI in an RSS .xml action, (2) pag1.php, (3) pag1-guest.php, (4) rss-comment_post.php (aka rss-coment_post.php), or (5) rss-pic-co...

Gentoo Security Advisory GLSA 200812-08 (mgetty)

The remote host is missing updates announced in advisory GLSA 200812-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200812-08 (mgetty)

The remote host is missing updates announced in advisory GLSA 200812-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: mgetty+sendfax

The remote host is missing an update to the system as announced in the referenced advisory. VID 44ee8160-c453-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 44ee8160-c453-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mgetty+sendfax

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...