Lucene search
+L

1988 matches found

wpexploit
wpexploit
added 2022/03/29 12:0 a.m.118 views

Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the QUERYSTRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters GET /wp-admin/admin.php?page=GOTMLSViewQuarantine&a=" HTTP/1.1 Cache-Control: max-age=0...

6.1CVSS1.6AI score0.03013EPSS
SaveExploits4
HackRead
HackRead
added 2022/03/08 7:32 p.m.11 views

How to Give Your Apple Devices a Cybersecurity Review

By Owais Sultan Online threats like malware and ransomware attacks against Apple devices especially MacBook are surging and require attention like… This is a post from HackRead.com Read the original post: How to Give Your Apple Devices a Cybersecurity Review...

5.4AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:0 a.m.8 views

VulnCheck KEV: CVE-2017-8540

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

9.3CVSS7.1AI score0.71961EPSS
SaveExploits3References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.67 views

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

9.3CVSS2.9AI score0.71961EPSS
SaveIn wildExploits3
The Hacker News
The Hacker News
added 2022/02/18 6:15 a.m.29 views

4 Cloud Data Security Best Practices All Businesses Should Follow Today

These days, businesses all around the world have come to depend on cloud platforms for a variety of mission-critical workflows. They keep their CRM data in the cloud. They process their payrolls in the cloud. They even manage their HR processes through the cloud. And all of that means they're...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/12/29 12:0 a.m.58 views

Avast Antivirus Elevation of Privilege Vulnerability (CNVD-2022-06879)

Avast Antivirus is a suite of antivirus software from the Czech company Avast, and an elevation of privilege vulnerability exists in the Self-Defense driver for versions prior to Avast Antivirus 20.8. An attacker could exploit this vulnerability by "hollowing out" the process wscproxy.exe to gain...

8.8CVSS4.6AI score0.00433EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2021/12/16 5:45 p.m.5 views

IOCs

//////////////// ////////////////////// //...

8.2AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2021/12/07 1:42 p.m.21 views

How to check for Windows updates and install them

Keeping Windows up to date is an important part of warding off malware, exploits, and other attacks. If you’re not running the latest version of your OS, it can give cybercriminals the leverage they need to compromise your system. Unfortunately not all machines are running automatic updates by...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2021/12/01 12:0 a.m.16 views

Acronis Cyber Protect 15 DLL Hijacking Vulnerability

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, AI-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a DLL hijacking vulnerability that could b...

7.8CVSS3.9AI score0.00246EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.38 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.3AI score0.00451EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.34 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100274)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.1AI score0.00451EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.10 views

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to errors in code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to errors in code generation management. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

7.8CVSS8.1AI score0.05293EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/12/01 12:0 a.m.27 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100276)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

6.1CVSS3.1AI score0.00562EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2021/11/18 6:49 p.m.41 views

3 Top Tools for Defending Against Phishing Attacks

Even with the most sophisticated email scanning and phishing detection system available, phishing emails are still a very common intrusion vector for cybercriminals to use to introduce malware, including ransomware, to a business’ network. That’s because 1 increasingly, legitimate systems are use...

7.7AI score
SaveExploits0References6
NCSC
NCSC
added 2021/11/09 12:0 a.m.17 views

Vulnerability fixed in Microsoft Malware Protection Engine

Microsoft has fixed a vulnerability in the Microsoft Malware Protection Engine as used by Windows Defender and Microsoft System Center Endpoint Protection. The vulnerabilities allow a malicious person to execute arbitrary code. The following table lists the vulnerabilities...

9.3CVSS7.3AI score0.05293EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.9 views

PT-2021-5003 · Microsoft · Malware Protection Engine

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Malware Protection Engine MPE. Exploitation of this issue may allow an...

9.3CVSS8.1AI score0.05293EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2021/11/09 12:0 a.m.273 views

Security Updates for Windows Defender (November 2021)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.18700.3. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary...

9.3CVSS9.2AI score0.05293EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.15 views

Microsoft Windows Defender 代码注入漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Defender. The vulnerability arises from a network system or product not properly filtering specific elements of...

9.3CVSS8.3AI score0.05293EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.15 views

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to access control deficiencies, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...

7.8CVSS6.8AI score0.00505EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2021/08/11 12:0 a.m.19 views

Microsoft Windows Defender Multiple RCE Vulnerabilities (Jul 2021)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-07-2021. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

9.3CVSS7.6AI score0.02699EPSS
SaveExploits0References2
Rows per page
Query Builder