CVE-2023-34838

CVE-2023-34838 — XSS persistente nella eScan Management Console Panoramica Microworld Technologies eScan Management Console versione 14.0.1400.2281 è vulnerabile a un attacco di tipo Cross-Site Scripting persistente Stored XSS. Un attaccante autenticato con accesso alla funzione di gestione dei...

CVE-2023-34837

CVE-2023-34837 — Console di Gestione eScan: Cross-Site Scripting XSS Riflesso Panoramica CVE-2023-34837 è una vulnerabilità di Cross-Site Scripting XSS Riflesso scoperta nella Console di Gestione eScan di Microworld Technologies versione 14.0.1400.2281. La vulnerabilità esiste nel parametro POST...

CVE-2023-34836

CVE-2023-34836 — eScan Management Console 14.0.1400.2281: Cross-Site Scripting XSS Riflesso Panoramica ID CVE: CVE-2023-34836 Tipo di vulnerabilità: Cross-Site Scripting XSS riflesso Prodotto interessato: Microworld Technologies eScan Management Console Versione interessata: 14.0.1400.2281 Gravit...

CVE-2023-34835

CVE-2023-34835 — Console di Gestione eScan: Cross-Site Scripting Riflesso XSS Indice Panoramica Dettagli della Vulnerabilità Prodotto Affetto Analisi Tecnica Prova di Concetto Passi per Riprodurre Impatto Mitigazione e Rimedio Riferimenti Disclaimer Panoramica Una vulnerabilità di Cross-Site...

CVE-2023-33732

CVE-2023-33732 — Cross-Site Scripting Refletido no Console de Gerenciamento do eScan -orange Visão Geral CVE-2023-33732 é uma vulnerabilidade de Cross-Site Scripting XSS Refletido descoberta no Console de Gerenciamento eScan da Microworld Technologies , versão 14.0.1400.2281. A falha existe no...

CVE-2023-33731

CVE-2023-33731 — eScan Management Console: Cross-Site Scripting XSS Riflesso -orange Indice dei contenuti Panoramica Dettagli della Vulnerabilità Gravità e Punteggio CVSS Prodotto Coinvolto Analisi Tecnica Prova di Concetto Impatto Mitigazione e Rimedio Cronologia della Divulgazione...

CVE-2023-33730

CVE-2023-33730 — Escalata dei Privilegi della Console di Gestione eScan Criticità: Critica ID CVE: CVE-2023-33730 Divulgato: 30 Maggio 2023 Autore: Sahil Ojha Indice Panoramica Dettagli della Vulnerabilità Impatto Analisi Tecnica Prova di Concetto Rimedi Riferimenti Dichiarazione di Esclusione di...

CVE-2023-31703

CVE-2023-31703 — Reflektiertes XSS in der eScan Management Console Überblick CVE-ID: CVE-2023-31703 Schwachstellentyp: Reflektiertes Cross-Site Scripting XSS Betroffenes Produkt: Microworld Technologies eScan Management Console Betroffene Version: 14.0.1400.2281 Schweregrad: Mittel Entdeckt von:...

CVE-2023-31702

CVE-2023-31702 — Iniezione SQL nella eScan Management Console Autenticata Panoramica CVE-2023-31702 è una vulnerabilità di iniezione SQL autenticata scoperta in MicroWorld Technologies eScan Management Console versione 14.0.1400.2281. La vulnerabilità è presente nell'endpoint GetUserCurrentPwd,...

CVE-2024-42919

eScan प्रबंधन कंसोल शोषण शीर्षक : eScan Management Console - गलत पहुँच नियंत्रण लेखक : Jeyabalaji प्रभावित संस्करण : 14.0.1400.2281 परीक्षण किया गया : Windows 11 CVE : CVE-2024-42919 विवरण: eScan प्रबंधन कंसोल प्रमाणीकरण तंत्र लागू करता है; हालाँकि, acteScanAVReport एंडपॉइंट बिना किसी प्रमाणीकरण ...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Fixed a use-after-free bug in brcmfcfg80211detach. This is the candidate patch for CVE-2023-47233: https://nvd.nist.gov/vuln/detail/CVE-2023-47233 In the brcm80211 driver, the process starts with the following...

Supply chain attack on eScan antivirus: detecting and remediating malicious updates

UPD 30.01.2026: Added technical details about the attack chain and more IoCs. On January 20, a supply chain attack has occurred, with the infected software being the eScan antivirus developed by the Indian company MicroWorld Technologies. The previously unknown malware was distributed through the...

CVE-2023-31703

Cross Site Scripting XSS in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter...

CVE-2018-6202

In eScan Antivirus 14.0.1400.2029, the driver file econceal.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F8...

CVE-2018-6203

In eScan Antivirus 14.0.1400.2029, the driver file econceal.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C...

CVE-2018-6201

In eScan Antivirus 14.0.1400.2029, the driver file econceal.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020E0 or 0x830020E4...

CVE-2023-4383

A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The exploit has been...

CVE-2025-1369

A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached locally. The complexit...

CVE-2025-1366

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been...

CVE-2025-1367

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was contacted early...