Toy Defender - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defender published at the 'play' market has multiple vulnerabilities...

Defender II - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Defender II published at the 'play' market has multiple vulnerabilities...

Windows Antivirus Exclusions Enumeration

This module will enumerate the file, directory, process and extension-based exclusions from supported AV products, which currently includes Microsoft Defender, Microsoft Security Essentials/Antimalware, and Symantec Endpoint Protection. This module requires Metasploit:...

Kingsoft Defender Elevation of Privilege Vulnerability

Kingsoft Defender is a free security software with strong Trojan detection capability, fast vulnerability detection and compact size produced by Kingsoft Network Technology Co. The system service installed by Kingsoft Defender provides the function of creating high-privilege processes, but there...

Microsoft Classifies Ask Toolbar as 'Unwanted' Software

Microsoft has reclassified the Ask Toolbar as unwanted software, which means its security tools will automatically detect and remove all versions, except for the most recent, from Windows computers. Ask Toolbar is an interface to the 20-year-old Ask.com search engine, and it’s included in among...

pqasb.pqarchiver.com XSS vulnerability

Open Bug Bounty ID: OBB-61859 Description| Value ---|--- Affected Website:| pqasb.pqarchiver.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

2 3 4 5 security guards driving there is a design problem-a vulnerability warning-the black bar safety net

2 3 4 5 Security Defender installed 2345powerapi. sys driver does not check to open its device object of the process. Cause any having to open the device object permissions process can be used which is driven in the function. Since called powerapi is certainly a very good very powerful. I'll try ...

Update for Windows 8 (KB3025417)

Install this update to improve protection functionality in Windows Defender. See the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Microsoft Windows Defender ActiveX Heap Overflow PoC

No description provided by source. Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows 7 Microsoft Windows Defender html object classid='clsid:07DD3249-A591-4949-8F20-09CD347C69DC' id='target' /object script language='vbscript' targetFile = C:\Program...

MS Security Advisory 2974294: Vulnerability in Microsoft Malware Protection Engine Could Allow Denial of Service

A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote host. Scanning a maliciously crafted file could prevent the Malware Protection Engine from monitoring affected systems until the file is manually removed and the service is restarted. This plugin checks if...

Microsoft Malware Protection Engine Denial of Service Bug

Microsoft today released a security advisory alerting users of a serious vulnerability in the antimalware engine present in a number of security products, including Windows Defender, Forefront and others. The update will be automatically pushed down to the Microsoft Malware Protection Engine in t...

Microsoft Releases Security Advisory for Microsoft Malware Protection Engine

Microsoft has released a security advisory to address a vulnerability to the Microsoft Malware Protection Engine. Successful exploitation of the vulnerability could allow an attacker to cause a denial of service. An update is available for the following affected software: Microsoft Forefront Clie...

3 6 0 safety guard is closed vulnerability analysis-vulnerability warning-the black bar safety net

3 6 0 safety guard is closed the vulnerability analysis and testing environment for 3 6 0 security guards 9. 0, the latest version of Security Defender has to fix this vulnerability Phenomenon A Trojan can shut down 3 6 0 security guards, through reverse analysis found that the Trojan horse just...

Microsoft Windows multiple security vulnerabilities

Multiple vulnerabilities in .Net and Silverlight, multiple kernel components vulnerabilities, GDI+ TrueType parsing memory corruption, DirectShow memory corruption, VMW parsing memory corruption, multiple Internet Explorer memory corruption, Windows Defender privilege escalation...

CVE-2013-3154

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...

Improper access control

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...

CVE-2013-3154

CVE-2013-3154 affects Windows Defender on Windows 7 and Windows Server 2008 R2. The issue is caused by an incorrect pathname used by the signature-update functionality, enabling local users to gain privileges via a Trojan horse in the %SYSTEMDRIVE% top-level directory. A successful exploit allows...

CVE-2013-3154

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper...

Microsoft Windows Defender Privilege Elevation Vulnerability (2847927)

This host is missing an important security update according to Microsoft Bulletin MS13-058. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-058: Vulnerability in Windows Defender Could Allow Elevation of Privilege (2847927)

The remote host has a version of Windows Defender installed that is affected by a privilege escalation vulnerability. An attacker with valid login credentials who successfully exploits this vulnerability can execute arbitrary code with SYSTEM privileges. C Tenable Network Security, Inc...