The vulnerability of the passPrompt() function in the USB Protection Service component of the MicroWorld eScan Antivirus antivirus software allows a hacker to execute arbitrary code.

The vulnerability of the passPrompt function in the USB Protection Service component of the MicroWorld eScan Antivirus antivirus software for Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

CVE-2023-31703

Cross Site Scripting XSS in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter...

CVE-2023-4383

A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The exploit has been...

EUVD-2008-1230

Malware in sbrugna...

EUVD-2007-4631

Malware in sbrugna...

EUVD-2007-0653

Malware in sbrugna...

EUVD-2018-2177

Malware in sbrugna...

EUVD-2023-35997

Malicious code in bioql PyPI...

EUVD-2024-51410

Malicious code in bioql PyPI...

EUVD-2023-54247

Malicious code in bioql PyPI...

EUVD-2025-1872

Malicious code in bioql PyPI...

EUVD-2023-38876

Malicious code in bioql PyPI...

EUVD-2025-2128

Malicious code in bioql PyPI...

EUVD-2025-1871

Malicious code in bioql PyPI...

CVE-2024-13990 MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

CVE-2024-13990: Improper Certificate Validation

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

MicroWorld eScan AV 安全漏洞

MicroWorld eScan AV is a security software for protection against malware from MicroWorld India. A security vulnerability exists in MicroWorld eScan AV that stems from a failure of the update mechanism to ensure the authenticity and integrity of update packages, which could lead to...

CVE-2025-0797

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...

CVE-2024-13188

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2023-31702

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1...