Malwarebytes Anti-Malware - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Malwarebytes Anti-Malware published at the 'play' market has multiple vulnerabilities...

Reason Core Security v1.2.0.1 - Path Privilege Escalation

Document Title: =============== Reason Core Security v1.2.0.1 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2003 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ====================================...

Reason Core Security 1.1.2 Privilege Escalation

===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 10...

Stress Test Anti Malware System: al-khaser

Stress Test Anti Malware System al-khaser is a PoC malware with good intentions that aims to stress your anti-malware system. It performs a bunch of nowadays malwares tricks and the goal is to see if you catch them all. Some of the common use are: You are making an anti-debug plugin and you want ...

CVE-2 0 1 6-1 0 1 9: a Magnitude attack tool flash vulnerability-vulnerability warning-the black bar safety net

Last month, Proofpoint has a security researchers found the Magnitude of attack tools there appears to be some new stuff. So in their cooperation we analyzed the sample and found that Magnitude EK added before exist in the Adobe Flash Player Vulnerability, cve-2 0 1 6-1 0 1 9, and then the wild u...

Anti-Malware Security & Brute-Force Firewall <= 4.15.42 - XSS & CSRF

The Anti-Malware Security and Brute-Force Firewall WordPress plugin was affected by a XSS & CSRF security vulnerability. XSS vulnerability in https://wordpress.org/plugins/gotmls/ has been identified. While I scan a site with that plugin , i had a file '".png and it was skippped , but result was...

Malwarebytes Anti-Malware Elevation of Privilege Vulnerability

Malwarebytes Anti-Malware MBAM is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. An elevation of privilege vulnerability exists in...

Juan Andres Guerrero-Saade on the Dangers of APT Security Research

Juan Andres Guerrero-Saade from Kaspersky Lab’s Global Research & Analysis Team GReAT joins Ryan Naraine on the podcast to discuss the “identity crisis” in the anti-malware industry and the ethics and perils of investigating state-sponsored or geopolitically significant threats. READ The Ethics a...

Multiple Vulnerabilities in WordPress Anti-Malware and Brute-Force Security by ELI Plugin

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation, which supports personal blog sites on PHP and MySQL servers.Anti-Malware and Brute-Force Security by ELI is one of the quick detection of malicious code and removal of threats by the Plugin. The WordPress...

Anti-Malware & Brute-Force Security by ELI <= 4.15.22 - Stored XSS

The Anti-Malware and Brute-Force Security by ELI has two issues which we will cover in this report. The first is that no nonce CSRF token is utilized on the settings screen. This could potentially result in resource utilization by performing a large number of scans simultaneously, should an...

Anti-Malware & Brute-Force Security by ELI <= 4.15.17 - Multiple Reflected XSS

The Anti-Malware Security and Brute-Force Firewall WordPress plugin was affected by a Multiple Reflected XSS security vulnerability. http://localhost/wordpress/wp-admin/admin.php?page=GOTMLS-settings&GOTMLSmsg=xsstestalert1...

Malwarebytes Anti-Malware / Anti-Exploit Update Remote Code Execution Exploit

This Metasploit module exploits a vulnerability in the update functionality of Malwarebytes Anti-Malware consumer before 2.0.3 and Malwarebytes Anti-Exploit consumer 1.03.1.1220. Due to the lack of proper update package validation a man-in-the-middle attacker could execute arbitrary code by...

Malwarebytes Anti-Malware / Anti-Exploit Update Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Malwarebytes Anti-Malware and Anti-Exploit Update Remote Code Execution', 'Description' = %q This module exploits a vulnerability in...

Malwarebytes Anti-Malware Detection (Windows SMB Login)

Detects the installed version of Malwarebytes Anti-Malware. The script logs in via smb, searches for Malwarebytes Anti-Malware in the registry and gets the version from SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Malwarebytes Anti-Exploit Detection (Windows SMB Login)

Detects the installed version of Malwarebytes Anti-Exploit. The script logs in via smb, searches for Malwarebytes Anti-Malware in the registry and gets the version from SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2014-4936

CVE-2014-4936 affects Malwarebytes Anti-Malware (MBAM) consumer pre-2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer ≤1.04.1.1012. Multiple public and security feeds describe a MITM vulnerability in the update mechanism: an attacker spoofing the update server can upload and execute arbitrary c...

Malwarebytes Anti-Malware < 2.0.3 / Anti-Exploit < 1.03.1.1220 - Update Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Malwarebytes Anti-Malware and Anti-Exploit Update Remote Code Execution', 'Description' = %q This module exploits a vulnerabili...

Malwarebytes Anti-Malware and Anti-Exploit Update Remote Code Execution

This module exploits a vulnerability in the update functionality of Malwarebytes Anti-Malware consumer before 2.0.3 and Malwarebytes Anti-Exploit consumer 1.03.1.1220. Due to the lack of proper update package validation, a man-in-the-middle MITM attacker could execute arbitrary code by spoofing t...

Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware

Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...

KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability

No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...