1643 matches found
Kaspersky Endpoint Security for Windows MD5 Local Information Disclosure Vulnerability
Kaspersky Endpoint Security for Windows is a suite of Windows-based security software that provides digital threat protection for business users. A local information disclosure vulnerability exists in Kaspersky Endpoint Security for Windows, which can be exploited by local attackers to obtain...
Kaspersky Endpoint Security 'avp.exe' Authentication Bypass Vulnerability
Kaspersky Endpoint Security is a suite of security software that provides digital threat protection protection for business users. Kaspersky Endpoint Security suffers from an authentication bypass vulnerability that could be exploited by an attacker to bypass authentication mechanisms and perform...
Design/Logic Flaw
The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked...
[SYSS-2015-001] Kaspersky Endpoint Security - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-001 Product: Kaspersky Endpoint Security for Windows KES Manufacturer: Kaspersky Lab ZAO Affected Versions: 8.1.0.1042, 10.2.1.23 Tested Versions: 8.1.0.1042, 10.2.1.23 Vulnerability Type: Authentication Bypass Using an...
[SYSS-2015-002] Kaspersky Endpoint Security - Use of One-Way Hash withouth a Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-002 Product: Kaspersky Endpoint Security for Windows KES Vendor: Kaspersky Lab ZAO Affected Versions: 8.1.0.1042, 10.2.1.23 Tested Versions: 8.1.0.1042, 10.2.1.23 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-75...
Kaspersky Endpoint Security For Windows 8.1.0.1042 / 10.2.1.23 Unsalted Hash Vulnerability
The SySS GmbH found out that the admin password for protecting different functions of the Kaspersky Endpoint Security software, like managing backups or stopping protection services, is stored as raw, unsalted MD5 hash value in the Windows registry. Product: Kaspersky Endpoint Security for Window...
Kaspersky Endpoint Security For Windows 8.1.0.1042 / 10.2.1.23 Authentication Bypass
By analyzing the password-based authentication for unloading the Kaspersky Endpoint Security for Windows protection, the SySS GmbH found out, that the password comparison is done within the process avp.exe, which runs or can be run in the context of the current Windows user, who can also be a...
Kaspersky Endpoint Security For Windows 8.1.0.1042 / 10.2.1.23 Unsalted Hash
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-002 Product: Kaspersky Endpoint Security for Windows KES Vendor: Kaspersky Lab ZAO Affected Versions: 8.1.0.1042, 10.2.1.23 Tested Versions: 8.1.0.1042, 10.2.1.23 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-75...
FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack
In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...
wazuh
Wazuh !Slackhttps://img.shields.io/badge/slack-join-blue...
[SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-014 Product: Panda Global Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...
Rekall Memory Forensic Framework
Rekall is an advanced forensic and incident response framework. While it began life purely as a memory forensic framework, it has now evolved into a complete platform. Rekall implements the most advanced analysis techniques in the field, while still being developed in the open, with a free and op...
Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation
Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint securit...
Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation
Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...
Privacyware Privatefirewall 7.0 Privilege Escalation
Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...
Web Login Bruteforce in Symantec Endpoint Protection Manager 12.1.4023.4080
We discovered a vulnerability in the Symantec Endpoint Protection Manager web application. Vulnerability Type: Login Bruteforce Original Release: June 20, 2014 Discovered by: Security Team - A2SECURE Artлm Tsvetkov [email protected] Sisco Barrera [email protected] Andrea Bodei...
Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36315/info Check Point Software Endpoint Security Full Disk Encryption for Microsoft Windows is prone to a remote denial-of-service vulnerability. Exploiting this issue will allow attackers to crash the affected computer,...
Keynect Ecommerce SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : SQL Injection Keynect Ecommerce | | Author : Arturo Zamora | | email : [email protected] | | DAte : 10/03/2011 | | Verified : yes | | Risk : High | |...
Check Point offers important security update for Endpoint Security Management Server
...
CVE-2013-7304
Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which allows man-in-the-middle attackers to spoof SSL servers by presenting an arbitrary certificate during a session established by a client...