CVE-2017-4052

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter...

CVE-2017-4055

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization...

CVE-2017-4054

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4052

CVE-2017-4052 concerns McAfee Advanced Threat Defense (ATD). The connected sources confirm an authentication bypass vulnerability in the web interface affecting ATD versions 3.10, 3.8, 3.6, and 3.4, allowing remote unauthenticated users to change or update arbitrary configuration settings or gain...

CVE-2017-4053

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4052

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter...

CVE-2017-4054

CVE-2017-4054 affects McAfee Advanced Threat Defense (ATD) web interface versions 3.4, 3.6, 3.8 and 3.10. The vulnerability is a Command Injection in the web interface that allows remote authenticated users to execute arbitrary commands via a crafted HTTP request parameter. The provided connected...

Microsoft Windows Multiple Vulnerabilities (KB4025342)

This host is missing a critical security update according to Microsoft KB4025342 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4025343)

This host is missing a critical security update according to Microsoft KB4025343 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The Real-World Impact of Bug Bounties and Vulnerability Research

Running the world’s largest vendor agnostic bug bounty program has afforded us the unique opportunity to purchase bugs of all varieties. The submissions to the Zero Day Initiative ZDI program range in severity from slightly annoying to hugely impactful. We wouldn’t have it any other way. Generall...

Dr0p1t Framework 1.3 - A Framework That Creates An Advanced FUD Dropper With Some Tricks

Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks! Features Generated executable properties: The executable size is smaller compar...

The vulnerability of the MPEG-4 AVC software platform, Flash Player, allows attackers to execute arbitrary code.

The vulnerability of the MPEG-4 AVC software platform, Flash Player, arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Advanced Hash Manipulation: Dagon

Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to ASCII, an...

Elasticsearch Kibana Improper Authentication Vulnerability

Elasticsearch Kibana is prone to an improper authentication vulnerability. This VT has been split into two VTs with the OIDs 1.3.6.1.4.1.25623.1.0.108259 and 1.3.6.1.4.1.25623.1.0.108260 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

Freeware Advanced Audio mp4ff_read_stsd Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffreadstsd function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...

Freeware Advanced Audio Decoder mp4ff_read_ctts Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffreadctts function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...

Freeware Advanced Audio mp4ff_parse_tag Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffparsetag function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...

Freeware Advanced Audio mp4ff_read_mdhd Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability in the common/mp4ff/mp4atom.c/mp4ffreadmdhd function could allow a remote attacker to cause a denial of service vulnerability via a constructed mp4 file...

Freeware Advanced Audio Decoder mp4ff_read_stco Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffreadstco function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...

franksalt.com.mt XSS vulnerability

Vulnerable URL: https://franksalt.com.mt/advanced-search/?currency=idr=forSale0=51=62=12=%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 497048 VIP website status:| ...