McAfee Drive Encryption 7.1 < 7.1.3 HF1241165 or 7.2.x < 7.2.6 Authentication Bypass vulnerability

The remote host is running a version of McAfee Drive Encryption that is 7.1 7.1.3 HF1241165 or 7.2.x 7.2.6 that is affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111531; scriptversion"1.5";...

ThreatList: Spam’s Revival is Tied to Adobe Flash’s Demise

Spam click-rates are up in 2018. Last year, 13.4 percent of spam messages that made it into inboxes were clicked on. So far, in 2018 that percentage has jumped to 14.2 percent. The numbers come from F-Secure, which reported Wednesday on the sorry state of users’ better judgment when it comes to...

DOJ Nabs Three FIN7 Cybercrime Suspects in Europe

Three suspected members of the FIN7 cybercrime group have been arrested in Europe and accused of hacking more than 120 U.S.-based companies with the intent of stealing bank cards. In total, U.S. Department of Justice authorities said the FIN7 group — associated with the Carbanak crime gang — is...

McAfee Drive Encryption TPM autoboot authentication bypass vulnerability

McAfee Drive Encryption MDE is a suite of full disk encryption software from the American company McAfee. The software is mainly used to protect data on tablets, laptops and desktop computers with Microsoft Windows to prevent the loss of sensitive data.TPM autoboot is one of the TPM autoboot...

CVE-2018-6686

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

Authentication flaw

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

CVE-2018-6686

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

CVE-2018-6686

Summary of findings (CVE-2018-6686) : The vulnerability concerns McAfee Drive Encryption (MDE) with TPM autoboot. The NVD entry describes an Authentication Bypass in MDE 7.1.0 and newer, where a attacker in close physical proximity could bypass local security protections under specific circumstan...

CVE-2018-6686 Drive Encryption (MDE) - Authentication Bypass vulnerability

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

PT-2018-17713 · Mcafee · Mcafee Drive Encryption

Name of the Vulnerable Software and Affected Versions: McAfee Drive Encryption MDE versions 7.1.0 and above Description: The issue allows physically proximate attackers to bypass local security protection via a specific set of circumstances. This is related to an Authentication Bypass vulnerabili...

CVE-2018-6686: Improper Authentication

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

‘Hidden Bee’ miner delivered via improved drive-by download toolkit

This blog post was authored by @hasherezade and Jérôme Segura. We recently detected a drive-by download attack trying to exploit CVE-2018-4878, a vulnerability in Flash Player, in a sequence that was not matching any of the exploit kit patterns that we currently track. Upon investigation, we...

Microsoft Windows - dnslint.exe Drive-By Download

Microsoft Windows - dnslint.exe Drive-By Download + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DNSLINT.EXE-FORCED-DRIVE-BY-DOWNLOAD.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor...

Microsoft Windows - 'dnslint.exe' Drive-By Download

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DNSLINT.EXE-FORCED-DRIVE-BY-DOWNLOAD.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor ================= www.microsoft.com Product ===========...

Microsoft DNS dnslint.exe Tool Forced Drive-By Download Vulnerability

Microsoft's dnslint.exe tool does not verify domain names when parsing DNS text-files using the "/ql" switch making it prone to forced drive-by downloads, providing an end user is tricked into using a server text-file containing a script/binary reference instead of a normally expected domain name...

fantasydrive.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650837 Description| Value ---|--- Affected Website:| fantasydrive.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft dnslint.exe DNS Tool Forced Drive-By Download

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DNSLINT.EXE-FORCED-DRIVE-BY-DOWNLOAD.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor ================= www.microsoft.com Product ===========...

Eaton 9000X Drive Buffer Overflow Vulnerability

The Eaton 9000X Drive is an American Eaton inverter with integrated data logger functionality that allows multiple drives to be monitored simultaneously. A stack buffer overflow vulnerability exists in Eaton 9000X Drive version 2.0.29 and prior versions, which can be exploited by remote attackers...

Eaton 9000X Drive

1. EXECUTIVE SUMMARY CVSS v3 5.6 ATTENTION: Exploitable remotely Vendor: Eaton Equipment: 9000X Drive Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

CoinHive URL Shortener Abused to Secretly Mine Cryptocurrency Using Hacked Sites

Security researchers have been warning about a new malicious campaign that leverages an alternative scheme to mine cryptocurrencies without directly injecting the infamous CoinHive JavaScript into thousands of hacked websites. Coinhive is a popular browser-based service that offers website owners...