614 matches found
ESET Nod32 Romania Hacked !
Today guy from InSecurity.Ro named sway1990 found again a critical vulnerability MySQL Injection in their website. Some extracted informations: Version – 5.1.41-3ubuntu12.10 Main DB – c1eset HostName – web.axelsoft.ro User – c1eset@localhost DataBases: informationschema c1eset Tables of main db:...
Report : Attacks on social media to rise in 2011 !
ESET, a security solution provider for viruses and malicious software, has released its cyber-threat report for 2011, predicting that attacks on Facebook and other social networks will increase over the coming year. The report prepared by specialists and searchers in the business also says the...
Athena-gs.fr Cross Site Scripting
+-----------------------------------------------------------+ | Stupid XSS + "Auth ByPass" athena-gs.fr | +-----------------------------------------------------------+ | Author : FlUxIuS from Slashon and HandGrep | | Date : 14/06/2010 | +-----------------------------------------------------------...
ESET Smart Security / NOD32 Antivirus LZH Processing Denial of Service
No description provided by source. Oleksiuk Dmitry has discovered a vulnerability in ESET Smart Security and ESET NOD32 Antivirus, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing LZH archives. This can be...
ESET Smart Security / Nod32 memory corruption
Memory corruption on LZH archives scanning...
ESET Smart Security LZH archive parsing vulnerability
Software: ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 Vendor status: notified/ignored Tested on: Windows XP, Vista, 7 x32 and x64 Description: Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. PoC...
ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC
Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) - LZH archive parsing (PoC)
ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH will be created c 2010 eSage Lab...
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86x64) - LZH archive parsing (PoC)
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 x86x64 - LZH archive parsing PoC ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log f...
Mozilla Admits Malware Sneaked into Firefox Add-ons
Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...
ESET Cross Site Scripting
\ // /\ /\ / | \ \ | | | | / \ | \ | | http://www.eset.com/ | / / // / || / / / Cross Site Scripting Exploit Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Vulnerability: Cross Site Scripting ————————- 1. INFORMATION | ————————- Site:...
CVE-2008-7107
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
Design/Logic Flaw
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
CVE-2008-7107
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
CVE-2008-7107
CVE-2008-7107 affects ESET Smart Security 3.0.667.0; easdrv.sys can be triggered by a crafted IOCTL 0x222003 to the \.\easdrv interface, enabling local denial of service (crash). The NVD entry reports a base CVSS v2 score of 7.2 (LOCAL, low access complexity, no auth, complete impact on confident...
ESET Antivirus CAB Scan Evasion
The ESET antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the virus signature database file version of the installed antivirus product is prior to 4036. An attacker can exploit this, by...
ESET Remote Administrator XSS Vulnerability
This host is running ESET Remote Administrator and is prone to remote Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodesetremoteadministratorxssvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ ESET Remote Administrator XSS Vulnerability Authors: Nikita MR Copyright:...
ESET Remote Administrator Version Detection
This script detects the installed version of ESET Remote Administrator. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
ESET Remote Administrator XSS Vulnerability
ESET Remote Administrator is prone to a remote Cross-Site Scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
ESET Remote Administrator远程脚本注入漏洞
BUGTRAQ ID: 33633 CVECAN ID: CVE-2009-0548 ESET Remote Administrator用于远程安装和集中管理网络中的ESET杀毒软件。 ESET Remote Administrator没有正确地验证对Additional Report Settings接口的输入，远程攻击者可以通过提交恶意请求注入任意HTML和脚本代码，并在用户查看报表的时候执行注入的代码。 Eset Remote Administrator 3.0.35 厂商补丁： Eset ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...