Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal

Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal Exploit Title: Trend Micro Data Loss Prevention Virtual Appliance 5.2 Web Path Traversal Date: 10/11/2017 Exploit Author: Leonardo Duarte Contact: http://twitter.com/etakdc Vendor Homepage:...

Trend Micro Data Loss Prevention File Disclosure

File disclosure vulnerability in Trend Micro Data Loss Prevention Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Debian DLA-1119-1 : otrs2 security update

An attacker who is logged into OTRS, a Ticket Request System, as an agent with write permissions for statistics can inject arbitrary code into the system. This can lead to serious problems like privilege escalation, data loss, and denial of service. This issue is also known as CVE-2017-14635 and ...

[SECURITY] [DLA 1119-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1deb7u1 CVE ID : CVE-2014-1695 CVE-2014-2553 CVE-2014-2554 CVE-2017-14635 Debian Bug : 876462 An attacker who is logged into OTRS, a Ticket Request System, as an agent with write permissions for statistics can inject arbitrary code into the system. This can lead t...

Adobe Private PGP Key Leak a Blunder, But It Could Have Been Worse

Adobe suffered at a minimum a PR black eye on Friday when one of its private PGP keys was inadvertently published to its Product Incident Security Response Team PSIRT blog. The company’s public and private key pair were published together, both of which could be used to either decrypt messages se...

Stored Cross-Site Scripting Vulnerability in Tea Bugs App

The Tea Bug app is a and a mobile software specially created for those who love tea culture. Tea Bug app has a stored cross-site scripting vulnerability. Allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

McAfee Data Loss Prevention Endpoint ePO extension cross-site scripting vulnerability

McAfee Data Loss Prevention Endpoint DLP Endpoint is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control, and data...

'Little Hope' to Recover Data Lost to Petya Ransomware

Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. Fewer than 50 ExPetr/Petya ransomware victims have paid approximately $10,200 in Bitcoin so far in the hopes of unlocking...

Cross site scripting

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

PT-2017-16172

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLP Endpoint versions 10.0.x Description The issue allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session, specifically through...

Google's New Tool Lets You Easily Backup & Sync Your Entire PC to the Cloud

Soon you will be able to auto backup and sync your whole computer on Google Drive. Yes, you heard that right. By the end of this month, Google will launch Backup and Sync — a new, simple tool that has been designed to help you backup not only your documents and photos in the cloud but your entire...

McAfee Network Data Loss Prevention Session Hijacking Vulnerability (CNVD-2017-07550)

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP suffers from a session-side hijacking vulnerability in the server implementation, which can be exploited by remote attackers to view, add, and delete users by modifying HTTP request...

McAfee Network Data Loss Prevention Elevation of Privilege Vulnerability

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP suffers from an elevation of privilege vulnerability in the server implementation, which can be exploited by remote attackers to view confidential information by modifying HTTP...

McAfee Network Data Loss Prevention Information Disclosure Vulnerability (CNVD-2017-07615)

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP 9.3.x suffers from an information disclosure vulnerability in the server implementation, which can be exploited by a remote attacker to view user information via the device web...

McAfee Network Data Loss Prevention Information Disclosure Vulnerability (CNVD-2017-07548)

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP has a Web server information leakage vulnerability in the server implementation, which can be exploited by remote attackers to exploit other vulnerabilities via the HTTP response...

McAfee Network Data Loss Prevention Clickjacking Vulnerability (CNVD-2017-07549)

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP suffers from a single-click hijacking vulnerability in the server implementation, which can be exploited by remote attackers to inject arbitrary web script or HTML via the HTTP...

McAfee Network Data Loss Prevention Information Disclosure Vulnerability (CNVD-2017-07551)

McAfee Network Data Loss Prevention is a data leakage protection solution. McAfee Network Data Loss Prevention NDLP suffers from an information disclosure vulnerability in the server implementation, which can be exploited by remote attackers to view product information via the HTTP response heade...