1592 matches found
Panda Internet Security Heap Based Buffer Overflow (Sep 2014)
Panda Internet Security is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
“Bleeding heart”vulnerability before the announcement may have been government agencies use-vulnerability warning-the black bar safety net
“Bleeding heart”vulnerability is already in the history of the Internet the most serious defects. However, the new study showed that“heart bleed”vulnerability in April broke before, there is no evidence that the heartbleed vulnerability has been used by hackers to large-scale use.“ Bleeding...
Comodo Internet Security - HIPS/Sandbox Escape
Exploit: http://www.joxeankoret.com/download/comodosandboxescape/sandboxtest1.tar.gz Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34648.tar.gz sandboxtest1.tar.gz Video: http://www.joxeankoret.com/download/comodosandboxescape/video/sandboxescape1.htm...
Comodo Internet Security - HIPSSandbox Escape
Comodo Internet Security - HIPSSandbox Escape Exploit: http://www.joxeankoret.com/download/comodosandboxescape/sandboxtest1.tar.gz Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34648.tar.gz sandboxtest1.tar.gz Video:...
Information disclosure
The Kaspersky Internet Security aka com.kms.free application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5654
Summary: CVE-2014-5654 affects the Android version of Kaspersky Internet Security (package com.kms.free), version 11.4.4.232. The app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and read sensitive information via a crafted certificate. Impact...
Kaspersky Internet Security Heartbeat Information Disclosure (Heartbleed)
The remote host has a version of Kaspersky Internet Security KIS installed that is missing a vendor patch. It is, therefore, affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that...
Sick Facebook Scammers Exploit Robin Williams' Suicide
Scammers spare no incident to target as many victims as possible, and this time they are exploiting the tragic death of comic actor Robin Williams by offering the fake Facebook videos proclaiming a Goodbye video message that Williams made before his death. According to Symantec, this fake Faceboo...
Threat Outbreak Alert RuleID10961: Email Messages Distributing Malicious Software on August 5, 2014
Medium Alert ID: 35177 First Published: 2014 August 5 19:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10961 may contain the following files: Name | Si...
Google Project Zero a Big Win for Security
Billions of people–not to mention a decent portion of the world’s economies–depend upon the Internet in a way that is both amazing and terrifying. We rely on the network in a way that perhaps we have never relied on anything in the course of human history. The Internet is a wonderful resource, bu...
OpenVPN Private Tunnel Privilege Escalation
OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary: Private Tunnel is a new approach to true Internet security creating a Virtual Private...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution
No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 Binary Analysis | | | | || / \ || | | | || ||// \/|/ Title : Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Version : UfPBCtrl.DLL...
Kingsoft Webshield 1.1.0.62 Cross Site scripting and Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this vulnerability to compromise an affected...
ZoneAlarm 8.0.20 HTTP Proxy Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet Security Suite 8.0.02...
Internet Security Systems Protocol Analysis Module ICQ Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9913/info It has been reported that the Internet Security Systems ISS Protocol Analysis Module is prone to a remote buffer overflow vulnerability when parsing the ICQ protocol. This issue exists due to insufficient bounds...
Joomla! 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35544/info Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
AVG Internet Security 9.0.851 - Local Denial of Service Exploit
No description provided by source. / Exploit Title: AVG Internet Security 0day Local DoS Exploit Date: 2010-11-01 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avg.com Version: up to date, version 9.0.851, avgtdix.sys version 9.0.0.832 Tested on: Win XP SP3 CVE :...
Internet Security Systems 3.6 ZWDeleteFile Function Arbitrary File Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This...
Avast! Internet Security aswtdi.sys 0day Local DoS PoC
No description provided by source. / Exploit Title: Avast! Internet Security aswtdi.sys 0day Local DoS PoC Date: 2010-11-04 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avast.com Version: up to date, version 5.0.677, aswtdi.sys version 5.0.677 Tested on: Win XP SP3 CVE :...
KosmosBlog 0.9.3 - (SQLi/XSS/CSRF) Multiple Vulnerabilities
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '67552' ssvid version = '1.0' author = '' vulDate = '' createDate = '2016-01-22'...