450 matches found
Avira Antivirus 15.0.21.86 - '.zip' Directory Traversal / Command Execution
Title : Avira Antivirus = 15.0.21.86 Command Execution SYSTEM Date : 08/11/2016 Author : R-73eN Tested on: Avira Antivirus 15.0.21.86 in Windows 7 Vendor : https://www.avira.com/ Disclosure Timeline: 2016-06-28 - Reported to Vendor through Bugcrowd. 2016-06-29 - Vendor Replied. 2016-07-05 - Vendo...
Avira Free Antivirus DLL Hijacking
Hi @ll, Avira's free antivirus full package executable installers, aviraantivirusen-us.exe, aviraantivirusde-de.exe etc., available from , etc., have multiple vulnerabilities: 1. the full package executable installers really: self- extracting RAR archives extract their payload the real installer...
Windows Gather Avira Password Extraction
This module extracts the weakly hashed password which is used to protect a Avira Antivirus 'Windows Gather Avira Password Extraction', 'Description' = %q This module extracts the weakly hashed password which is used to protect a Avira Antivirus MSFLICENSE, 'Author' = 'Robert Kugler / robertchrk',...
Avira Antivirus Buffer Overflow Vulnerability
Avira Antivirus is an antivirus program. A heap-based buffer overflow vulnerability exists in Avira Antivirus version 8.3.36.60, which can be exploited by a remote attacker to execute arbitrary code in an affected application, resulting in a denial of service...
Avira Android Optimizer - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Avira Android Optimizer published at the 'play' market has multiple vulnerabilities...
Avira Antivirus Security - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Avira Antivirus Security published at the 'play' market has multiple vulnerabilities...
Avira Vulnerability Checker - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Avira Vulnerability Checker published at the 'play' market has multiple vulnerabilities...
Avira - Heap Underflow Parsing PE Section Headers
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=765 One of the things you might expect an Antivirus engine to do reliably is parse PE files. However, after some simple testing with Avira, I found a heap underflow that is, writing before a heap allocation parsing section headers...
Avira - Heap Underflow Parsing PE Section Headers
Avira - Heap Underflow Parsing PE Section Headers Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=765 One of the things you might expect an Antivirus engine to do reliably is parse PE files. However, after some simple testing with Avira, I found a heap underflow that is, writing...
Avira - Heap Underflow Parsing PE Section Headers
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=765 One of the things you might expect an Antivirus engine to do reliably is parse PE files. However, after some simple testing with Avira, I found a heap underflow that is, writin...
Avira Cross Site Scripting
Exploit Title: AVIRA Subdomain XSS Vulnerability Google Dork: N/A Date: 2016/1/29 Exploit Author: RootByte Vendor Homepage: http://translate.avira.com Software Link: N/A Version: N/A Tested on: Windows 10 / FireFox CVE : N/A Vulnerable Location: http://translate.avira.com/accounts/login/ Variable...
Oracle Outside In 8.5.2 contains multiple stack buffer overflows
Overview Oracle Outside In versions 8.5.2 and earlier contain stack buffer overflow vulnerabilities in the parsers for WK4, Doc, and Paradox DB files, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of...
avira.com XSS vulnerability
Vulnerable URL: http://www.avira.com/en/cart/?product=937=12= Details: Description| Value ---|--- Patched:| Yes, at 24.01.2016 Latest check for patch:| 24.01.2016 19:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1904 Google Pagerank| 6 VIP website status:|...
Avira Registry Cleaner DLL Hijacking
Hi @ll, aviraregistrycleaneren.exe, available from to clean up remnants the uninstallers of their snakeoil products fail to remove, is vulnerable: it loads and executes WTSAPI32.dll, UXTheme.dll and RichEd20.dll from its application directory tested and verified under Windows XP SP3 and Windows 7...
The vulnerability of the Avira Management Console allows a hacker to execute arbitrary code.
The vulnerability of the Update Manager service in the Avira Management Console relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Avira Management Console Server HTTP Header Processing Heap Buffer Overflow
A heap buffer overflow vulnerability has been reported in Avira Management Console Server. The vulnerability exists in the way Update Manager Service handles overly long HTTP headers. A remote unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the server...
Avira Mobile Security for iOS Information Disclosure Vulnerability
Avira Mobile Security for iOS is a suite of mobile security software based on the iOS platform. A security vulnerability exists in Avira Mobile Security for iOS, which can be exploited by attackers to obtain sensitive information...
Avira Management Console Memory Misreference Vulnerability
Avira Management Console provides centralized and effective control of Avira security components. A memory misreference vulnerability exists in the Avira Management Console's Update Manager service, which can be exploited by a remote attacker to execute arbitrary code...
