CVE-2021-0013

Improper input validation for IntelR EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2021-0013

CVE-2021-0013 : Affected product is Intel® Endpoint Management Assistant (EMA) prior to version 1.5.0. The root cause is improper input validation in EMA, which may allow an unauthenticated user to trigger a denial-of-service condition over network access. Documented impact is a Partial/High avai...

Intel® EMA Advisory

Summary: A potential security vulnerability in the Intel® Endpoint Management Assistant EMA may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0013 Description: Improper input validation for IntelR EMA...

A week in security (January 18 – January 24)

Last week on Malwarebytes Labs, we looked at changes to WhatsApp’s privacy policy, we provided information about Malwarebytes being targeted by the same threat actor that was implicated in the SolarWinds breach, we told the story of ZeroLogon, looked at the pros and cons of Zoom watermarking,...

Hackers Leak Stolen Pfizer-BioNTech COVID-19 Vaccine Data

On the heels of a previously-reported cyberattack on the European Medicines Agency EMA, cybercriminals have spilled compromised data related to COVID-19 vaccinations onto the internet. The EMA is an agency of the European Union in charge of the evaluation and supervision of medicinal products in...

A week in security (December 7 – December 13)

Last week on Malwarebytes podcast we talked to Doug Levin, founder of the K12 cybersecurity resource center and advisor to the K12 Security Information Exchange, about how schools can plan for a cybersecure 2021. We also released a Malwarebytes Labs report revealing that 50 percent of schools did...

Pfizer COVID-19 Vaccine Targeted in EU Cyberattack

Criminals haven’t given up on stealing COVID-19 vaccine data. Yet another cyberattack has been launched — this time, threat actors were able to break into the European Medicines Agency EMA server and access documentation about the vaccine candidate from Pfizer and BioNTech. The breach is just...

CVE-2020-12315

Path traversal in the IntelR EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2020-12316

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12316

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

Path traversal

Path traversal in the IntelR EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Information disclosure

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12316

Intel EMA before version 1.3.3 is affected by CVE-2020-12316, where insufficiently protected credentials may allow an authorized user to disclose information via local access. The issue is documented across multiple sources (NVD, Red Hat, CVE list, and Intel advisory). Affected product: Intel(R) ...

CVE-2020-12316

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12315

The CVE-2020-12315 issue affects Intel EMA (Endpoint Management Assistant) prior to version 1.3.3. It is a path traversal vulnerability that could allow an unauthenticated user to escalate privileges via network access. Intel’s advisory confirms CVE-2020-12315 and notes mitigation by upgrading EM...

CVE-2020-12315

Path traversal in the IntelR EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Intel® EMA Advisory

Summary: Potential security vulnerabilities in the Intel® Endpoint Management Assistant EMA may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12315 Description: Path...

ema-rs.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137996 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ema-rs.de website and its...

ema.europa.eu XSS vulnerability

Vulnerable URL: http://www.ema.europa.eu/ema/index.jsp?keyword=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=View+all==name=true=pages%2Fmedicines%2Flanding%2Feparsearch.jsp=human=WC0b01ac058001d125=name=false=Authorised=true=generics=4 Details: Description| Value ---|--- Patched:| No Latest chec...

Digitale Age scripte Remote XSS/FPD Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...