New MacOS Malware linked to Russian Hackers Can Steal Passwords & iPhone Backups

Security researchers have discovered a new Mac malware allegedly developed by APT28 Russian cyber espionage group who is believed to be responsible for 2016 presidential election hacking scandal. A new variant of the X-Agent spyware is now targeting Apple macOS system that has previously been use...

Bitdefender Internet Security SIS Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security NSIS Pages Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security NSIS Entries Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bit Defender #39 - Auth Token Bypass Vulnerability

Document Title: =============== Bit Defender 39 - Auth Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1683 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 1683...

Bit Defender #39 - Auth Token Bypass Vulnerability

Document Title: =============== Bit Defender 39 - Auth Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1683 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 1683...

shop.bitdefender.com Open Redirect vulnerability

Vulnerable URL: https://shop.bitdefender.com/store/defendde/frCH/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

How to Protect All Your Internet-Connected Home Devices From Hackers

How many Internet-connected devices do you have in your home? I am surrounded by around 25 such devices. It's not just your PC, smartphone, and tablet that are connected to the Internet. Today our homes are filled with tiny computers embedded in everything from security cameras, TVs and...

Free Open Source Self Hosted VirusTotal: Malice

Free Open Source Self Hosted VirusTotal Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.’ Ubuntu Install: Install Go $ sudo add-apt-repository ppa:ubuntu-lxc/lxd-stable $ sudo apt-get updat...

Bitdefender Antivirus Plus avc3 Kernel Driver Elevation of Privilege Vulnerability

Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus suffers from a security vulnerability in the avc3 kernel driver handling IOCTL 0x002222f4. An attacker could exploit this vulnerability to execute arbitrary code on the target system...

Bitdefender Antivirus Plus bdfwfpf Elevation of Privilege Vulnerability

Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus has a security vulnerability in bdfwfpf processing 0x8000e038 IOCTL. An attacker could exploit this vulnerability to elevate its privileges on the target system...

Bitdefender Antivirus Plus bdfwfpf Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Bitdefender Antivirus Plus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Antivirus Plus avc3 Kernel Driver Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Bitdefender Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

SOFTWIN Bitdefender Antivirus Local Code Execution Vulnerability

SOFTWIN BitDefender Antivirus is a suite of antivirus programs from the Romanian company SOFTWIN. A local code execution vulnerability exists in SOFTWIN Bitdefender Antivirus, which can be exploited by a local attacker to cause a denial of service by executing arbitrary code within an affected...

Bitdefender Antivirus Free Edition DLL Hijacking

Aloha, AntivirusFreeEditionx64.exe loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

Bitdefender Bug Bounty PenTest Video - 4 Vulnerabilities

Document Title: =============== Bitdefender Bug Bounty PenTest Video - 4 Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1860 Watch Bug Bounty Series: https://www.youtube.com/playlist?list=PL2hnNNM3yw-lMZ4wEkhB2ls33oNRmXJ Watch Videos:...

store.bitdefender.com Open Redirect vulnerability

Vulnerable URL: https://store.bitdefender.com/affiliate.php?ACCOUNT=BTDLLC=30907=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.09.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

rdprojects.bitdefender.com XSS vulnerability

Vulnerable URL: https://rdprojects.bitdefender.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 25.07.2016 Latest check for patch:| 25.07.2016 19:11 GMT Vulnerability type:| XSS Vulnerability status:|...

labs.bitdefender.com XSS vulnerability

Vulnerable URL: https://labs.bitdefender.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 25.07.2016 Latest check for patch:| 25.07.2016 19:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

Bitdefender Antivirus Free - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Bitdefender Antivirus Free published at the 'play' market has multiple vulnerabilities...