CVE-2014-9920

CVE-2014-9920 affects McAfee Application Control (MAC) 6.x before specific hotfixes (9726 for 6.0.0, 9068 for 6.0.1, 692 for 6.1.0, 399 for 6.1.1, 426 for 6.1.2, 357 for 6.1.3 and earlier). A malformed Windows binary can be created that is treated as non-executable and bypasses the whitelisting p...

Pattern Matching Swiss Knife: YARA

YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families or whatever you want to describe based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strin...

New Utility Decrypts Files Lost to TeslaCrypt Ransomware

Crypto-ransomware variants have enterprises on edge because of the threat of irreversibly damaged files. Some organizations, including most recently the Tewksbury, Ma., police department have gone as far as to pay hundreds of dollars in ransom for the recovery key. Some technology companies are...

Tenable Log Correlation Engine (LCE) Windows Client Installed (credentialed check)

Binary data lceclientinstalledwin.nbin...

MySQL 3.20.32/3.22.x/3.23.x Null Root Password Weak Default Configuration Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows bina...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

This module exploits a vulnerability found in McAfee Security-as-a-Service. The ShowReport function located in the myCIOScn.dll ActiveX component fails to check the FileName argument, and passes it on to a ShellExecuteW function, therefore allows any malicious attacker to execute any process that...

Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)

The Windows binary GSV48W32.EXE of "gsview" http://pages.cs.wisc.edu/ghost/gsview/ ftp://mirror.cs.wisc.edu/pub/mirrors/ghost/ghostgum/gsv48w32.exe ships with a zlib32.dll originally named zlib.dll v1.2.2 http://www.zlib.net/ which is vulnerable to CAN-2005-2096. The zlib32.dll is dated 2005-03-0...

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration (2)

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration 2 / source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration...

MySQL 3.20.32/3.22.x/3.23.x - Null Root Password Weak Default Configuration (1)

/ source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows binary release of MySQL. Reportedly,...

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration (1)

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration 1 / source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration...

Seanox DevWex Windows Binary 1.2002.520 - File Disclosure

source: https://www.securityfocus.com/bid/4978/info The Seanox DevWex Windows binary version is prone to an issue which may cause arbitrary web-readable files to be disclosed to remote attackers. This problem occurs because DevWex does not sufficiently filter '..' sequences from web requests. GET...

Dick Lin ZetaMail 2.1 - Login Denial of Service

source: https://www.securityfocus.com/bid/813/info The ZetaMail mail server will crash if a username/password pair longer than 3500 characters is supplied by the client. 19636-1.exe - binary for windows 19636-2.zip - source for windows 19636-3.tgz - source for linux...