Bitdefender Internet Security cevakrnl Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security DLL Loading Local Code Injection Vulnerability

Bitdefender Internet Security is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Bitdefender Total Security DLL Loading Local Code Injection Vulnerability

Bitdefender Total Security is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

No More Ransom — 15 New Ransomware Decryption Tools Available for Free

No More Ransom, so is the Ransomware Threat. Launched less than a year ago, the No More Ransom NMR project has increased its capacity with new partners and new decryption tools added to its now global campaign to combat Ransomware. Started as a joint initiative by Europol, the Dutch National...

Multiple Bitdefender Product DLL Load Local Code Injection Vulnerabilities

Bitdefender Total Security and others are antivirus programs from the Romanian company Bitdefender. A local code injection vulnerability exists in multiple Bitdefender products. A local attacker could use this vulnerability to execute arbitrary code in the context of the system running in the...

Microsoft Application Verifier exposed 0day vulnerabilities, the impact of Trend Micro, Kaspersky, Symantec, including a large number of security products-vulnerability warning-the black bar safety net

Recently, Cybellum company found a 0-day vulnerability, can completely control most of the security product. This vulnerability is called“DoubleAgent”is a double-sided Spy, and many security vendors by DoubleAgent effects, including Avast, AVG, Avira, Bitdefender, Trend Micro, Comodo Comodo, ESET...

CVE-2017-6186

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...

CVE-2017-6186

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...

Code injection

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...

CVE-2017-6186

Bitdefender products Bitdefender Total Security 12.0 and earlier, Bitdefender Internet Security 12.0 and earlier, and Bitdefender Antivirus Plus 12.0 and earlier are listed as vulnerable to a local code-injection attack (CVE-2017-6186) via a DoubleAgent technique. The root cause described across ...

CVE-2017-6186

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...

Bitdefender - Cross Site Request Forgery Vulnerability

Document Title: =============== Bitdefender - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2040 Video: https://www.youtube.com/watch?v=jnNa4i01aok Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID:...

Bitdefender - Cross Site Request Forgery Vulnerability

Document Title: =============== Bitdefender - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2040 Video: https://www.youtube.com/watch?v=jnNa4i01aok Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID:...

New MacOS Malware linked to Russian Hackers Can Steal Passwords & iPhone Backups

Security researchers have discovered a new Mac malware allegedly developed by APT28 Russian cyber espionage group who is believed to be responsible for 2016 presidential election hacking scandal. A new variant of the X-Agent spyware is now targeting Apple macOS system that has previously been use...

Bitdefender Internet Security NSIS Pages Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security SIS Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security NSIS Entries Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bit Defender #39 - Auth Token Bypass Vulnerability

Document Title: =============== Bit Defender 39 - Auth Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1683 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 1683...

Bit Defender #39 - Auth Token Bypass Vulnerability

Document Title: =============== Bit Defender 39 - Auth Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1683 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 1683...

shop.bitdefender.com Open Redirect vulnerability

Vulnerable URL: https://shop.bitdefender.com/store/defendde/frCH/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...