CVE-2014-9641

The CVE-2014-9641 vulnerability affects Trend Micro tmeext.sys prior to version 2.0.0.1015, used by Trend Micro Antivirus Plus, Internet Security and Maximum Security. It allows a local attacker to write to arbitrary memory locations via a crafted 0x00222400 IOCTL, enabling privilege escalation. ...

AVG Internet Security Elevation of Privilege Vulnerability

AVG Internet Security is an Internet security suite that includes antivirus, antispyware, antispam, link scanning and firewall. AVG Internet Security suffers from an elevation of privilege vulnerability, which can be exploited by a local attacker to write arbitrary files to enforce kernel-level...

AVG Internet Security 2015.0.5315 Privilege Escalation

/ Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver Version - 15.0.0.5204 - avgtdix.sys Tested on OS - 32bit Windows XP SP3 OSV...

AVG Internet Security 2015.0.5315 - Arbitrary Write Privilege Escalation

/ Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver Version - 15.0.0.5204 - avgtdix.sys Tested on OS - 32bit Windows XP SP3...

AVG Internet Security 2015 Arbitrary Write Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver Version - 15.0.0.52...

Tcpcrypt - Encrypting the Internet

Tcpcrypt is a protocol that attempts to encrypt almost all of your network traffic. Unlike other security mechanisms, Tcpcrypt works out of the box: it requires no configuration, no changes to applications, and your network connections will continue to work even if the remote end does not support...

Integer overflow

Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service memory corruption and panic via a crafted IOCTLASWFWCOMMPIDINFORESULTS DeviceIoControl request to \.\aswFW...

CVE-2010-5075

Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service memory corruption and panic via a crafted IOCTLASWFWCOMMPIDINFORESULTS DeviceIoControl request to \.\aswFW...

CVE-2010-5075

The CVE-2010-5075 entry describes an integer overflow in Avast! Internet Security 5.0 Korean Trial’s kernel driver aswFW.sys (version 5.0.594.0) that can enable local users to trigger memory corruption and a denial of service via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS request to \.\aswFW. The...

Hackers leak 13,000 Passwords Of Amazon, Walmart and Brazzers Users

Hackers claiming affiliation with the hacktivist group "Anonymous" have allegedly leaked more than 13,000 username and password combinations for some of the worlds most popular websites, including Amazon, Xbox Live and Playstation Network. The stolen personal information was released in a massive...

Security Advisory-Memory Leak Vulnerability on USG products

The HUAWEI USG9560/9520/9580 is a high-end 10-Gigabit Firewall. The USG9560/9520/9580 applies to Internet backbone networks, IP dedicated backbone networks, IP metropolitan area networks MANs, Internet data center IDC egress. This security gateway provides multiple powerful and all-round security...

EFF, Others Plan to Make Encrypting the Web Easier in 2015

By all accounts, switching web servers over to HTTPS from HTTP has long been viewed as a fickle affair; HTTPS/SSL certificates are expensive and on top of that notoriously cumbersome to install and maintain. A new coalition comprised of The Electronic Frontier Foundation EFF and a handful of othe...

Comodo Internet Security - HIPS/Sandbox Escape PoC

No description provided by source. Exploit: http://www.joxeankoret.com/download/comodosandboxescape/sandboxtest1.tar.gz Mirror: www.exploit-db.com/sploits/sandboxtest1.tar.gz Video: http://www.joxeankoret.com/download/comodosandboxescape/video/sandboxescape1.htm...

srm - command-line program to delete files securely

srm is a secure replacement for rm1. Unlike the standard rm, it overwrites the data in the target files before unlinking them. This prevents command-line recovery of the data by examining the raw block device. It may also help frustrate physical examination of the disk, although it's unlikely tha...

Panda Internet Security Heap Based Buffer Overflow (Sep 2014)

Panda Internet Security is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

“Bleeding heart”vulnerability before the announcement may have been government agencies use-vulnerability warning-the black bar safety net

“Bleeding heart”vulnerability is already in the history of the Internet the most serious defects. However, the new study showed that“heart bleed”vulnerability in April broke before, there is no evidence that the heartbleed vulnerability has been used by hackers to large-scale use.“ Bleeding...

Comodo Internet Security - HIPS/Sandbox Escape

Exploit: http://www.joxeankoret.com/download/comodosandboxescape/sandboxtest1.tar.gz Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34648.tar.gz sandboxtest1.tar.gz Video: http://www.joxeankoret.com/download/comodosandboxescape/video/sandboxescape1.htm...

Comodo Internet Security - HIPSSandbox Escape

Comodo Internet Security - HIPSSandbox Escape Exploit: http://www.joxeankoret.com/download/comodosandboxescape/sandboxtest1.tar.gz Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34648.tar.gz sandboxtest1.tar.gz Video:...

Information disclosure

The Kaspersky Internet Security aka com.kms.free application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5654

Summary: CVE-2014-5654 affects the Android version of Kaspersky Internet Security (package com.kms.free), version 11.4.4.232. The app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and read sensitive information via a crafted certificate. Impact...