Design/Logic Flaw

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

CVE-2019-12752

CVE-2019-12752 affects the Symantec SONAR component prior to version 12.0.2, where a tamper-protection bypass could allow an attacker to circumvent resident tamper protections. The issue is documented across multiple sources (Red Hat, NVD, Nessus, and Symantec advisories). Affected product is Sym...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

Symantec SONAR Security Bypass

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec SONAR component. AFFECTED PRODUCTS Component: SONAR Engine --- CVE | Affected Versions | Remediation CVE-2019-12752 | Prior to 12.0.2 | Upgrade to 12.0.2 Note: Live updatable; no action required by...

Hacking the Bitfi. Part 1

A large number of security researchers have taken exception to the ‘unhackable’ claims made by Bitfi and John McAfee about the security of their hardware cryptocurrency wallet. The $100K bounty offered appears to be something of sham, given it covers a very, very specific scenario. Bitfi states...

Sophos Endpoint Protection Anti-tamper Protection Mechanism Bypass Vulnerability

Sophos Endpoint Protection helps protect your workstation by adding prevention, detection and response technologies to your operating system. A tamper protection mechanism bypass vulnerability exists in Sophos Endpoint Protection 10.7. A local user can exploit this vulnerability to bypass the...

Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass

Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt + ISR: Apparition Security Vendor:...

Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt + ISR: Apparition Security Vendor: ============= www.sophos.com Product: =========== Sophos...

CVE-2018-4863

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key...

Design/Logic Flaw

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key...

CVE-2018-4863

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key...

CVE-2018-4863

CVE-2018-4863 affects Sophos Endpoint Protection 10.7. A local user can bypass the product’s tamper protection by deleting the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense (TamperProtection/SEDEnabled). Evidence across sources (NVD entry, CNVD/PRION/CV...

Sophos Endpoint Protection 10.7 Tamper Protection Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt + ISR: Apparition Security Vendor: ============= www.sophos.com Product: =========== Sophos...

Sophos Endpoint Protection 10.7 Tamper Protection Bypass Vulnerability

Sophos Endpoint Protection version 10.7 suffers from a tamper protection bypass vulnerability. + Credits: John Page aka hyp3rlinx Vendor: ============= www.sophos.com Product: =========== Sophos Endpoint Protection v10.7 Sophos Endpoint Protection helps secure your workstation by adding preventio...

Symantec Endpoint Protection 12.1.6 Tamper Protection Bypass

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint...

Symantec Endpoint Protection v12.1 / Tamper-Protection Bypass Exploit

Exploit for windows platform in category local exploits + Credits: John Page a.k.a hyp3rlinx Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint Protection v12.1.6 12.1 RU6 MP5 Symantec 12.1.7004.6500 Vulnerability Type: =================== Tamper-Protection Bypass Denial Of...

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: =======...

Symantec Endpoint Protection Tamper Protection Bypass Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in versions prior to SEP 14 RU1 and version 12.1.X. The vulnerability can be exploited by an attacker to bypass...

Design/Logic Flaw

Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients...

CVE-2017-6331

Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients...