1566 matches found
Kaspersky Internet Security Heartbeat Information Disclosure (Heartbleed)
The remote host has a version of Kaspersky Internet Security KIS installed that is missing a vendor patch. It is, therefore, affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that...
Sick Facebook Scammers Exploit Robin Williams' Suicide
Scammers spare no incident to target as many victims as possible, and this time they are exploiting the tragic death of comic actor Robin Williams by offering the fake Facebook videos proclaiming a Goodbye video message that Williams made before his death. According to Symantec, this fake Faceboo...
Threat Outbreak Alert RuleID10961: Email Messages Distributing Malicious Software on August 5, 2014
Medium Alert ID: 35177 First Published: 2014 August 5 19:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10961 may contain the following files: Name | Si...
Google Project Zero a Big Win for Security
Billions of people–not to mention a decent portion of the world’s economies–depend upon the Internet in a way that is both amazing and terrifying. We rely on the network in a way that perhaps we have never relied on anything in the course of human history. The Internet is a wonderful resource, bu...
OpenVPN Private Tunnel Privilege Escalation
OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary: Private Tunnel is a new approach to true Internet security creating a Virtual Private...
Simple PHP Blog 0.5.1 - Local File Inclusion Vulnerability
No description provided by source. Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context ...
Internet Security Systems Protocol Analysis Module ICQ Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9913/info It has been reported that the Internet Security Systems ISS Protocol Analysis Module is prone to a remote buffer overflow vulnerability when parsing the ICQ protocol. This issue exists due to insufficient bounds...
ZoneAlarm 8.0.20 HTTP Proxy Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet Security Suite 8.0.02...
AhnLab V3 Internet Security 8.0 <= 1.2.0.4 - Privilege Escalation Vulnerability
No description provided by source. AhnLab V3 Internet Security 8.0 with AhnRec2k.sys = 1.2.0.4 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder $ 126.com VULNERABLE PRODUCTS AhnLab V3 Internet Security = 8.0.3.28?build 746 DETAILS: AhnRec2k.sys create a device...
KosmosBlog 0.9.3 - (SQLi/XSS/CSRF) Multiple Vulnerabilities
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '67552' ssvid version = '1.0' author = '' vulDate = '' createDate = '2016-01-22'...
Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24491/info Kaspersky Internet Security 6 is prone to multiple local vulnerabilities. Exploiting these vulnerabilities allows local attackers to crash affected computers, denying service to legitimate users. Attackers migh...
Kingsoft Webshield 1.1.0.62 Cross Site scripting and Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this vulnerability to compromise an affected...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution
No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 Binary Analysis | | | | || / \ || | | | || ||// \/|/ Title : Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Version : UfPBCtrl.DLL...
Avast! Internet Security aswtdi.sys 0day Local DoS PoC
No description provided by source. / Exploit Title: Avast! Internet Security aswtdi.sys 0day Local DoS PoC Date: 2010-11-04 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avast.com Version: up to date, version 5.0.677, aswtdi.sys version 5.0.677 Tested on: Win XP SP3 CVE :...
AVG Internet Security 9.0.851 - Local Denial of Service Exploit
No description provided by source. / Exploit Title: AVG Internet Security 0day Local DoS Exploit Date: 2010-11-01 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avg.com Version: up to date, version 9.0.851, avgtdix.sys version 9.0.0.832 Tested on: Win XP SP3 CVE :...
Internet Security Systems 3.6 ZWDeleteFile Function Arbitrary File Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution (MSF)
No description provided by source. trendmicroextsetowner.rb Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Trend Micro Internet Security Pro 2010 on Internet Explorer 7...
Joomla! 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35544/info Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Agnitum Outpost Internet Security Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
Avira Internet Security avipbb.sys Filter Bypass and Privilege Escalation
No description provided by source. Exploit Title: Avira internet security avipbb.sys filter bypass and privilege escalation - 0Day Date: 2013-10-17 Exploit Author: Ahmad Moghimi http://mallocat.com http://mallocat.com/, https://twitter.com/mall0cat Vendor Homepage: http://www.avira.com/ Software...