eScan Anti-Virus Denial of Service Vulnerability

eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x8300210C. A local user can exploit this...

eScan Anti-Virus Denial of Service Vulnerability (CNVD-2018-02623)

eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x830020E0 or 0x830020E4. A local user can...

escan.ae XSS vulnerability

Vulnerable URL: http://www.escan.ae/index.php?page=Escan-Tower Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23695288 VIP website status:| No Check escan.ae SSL connection:| Grade...

eScan - Mobile Antivirus - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application eScan - Mobile Antivirus published at the 'play' market has multiple vulnerabilities...

Ubuntu 12.04 eScan 5.5 Web Management Console 命令执行漏洞

No description provided by source...

eScan Web Management Console Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...

MicroWorld eScan Server 9.0.742 - Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files...

MicroWorld eScan Antivirus < 3.x Remote Root Command Execution

No description provided by source. !/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] MicroWorld eScan Antivirus 3.x Remote Root Command Execution Package MWADMIN package vulnerabilities linux The Base Packages MWADMIN and MWAV must be installed...

eScan Web Management Console Command Injection

A code execution vulnerability exists in the eScan Web Management Console. This vulnerability is due to processing CheckPass login requests with mwconf privileges. A remote attacker may exploit this vulnerability using a valid username and a malformed password to execute arbitrary commands...

eScan Web Management Console - Command Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "eScan Web Management Console Command Injection", 'Description' = %q This module exploits a command injection vulnerability found in t...

eScan Web Management Console Command Injection Exploit

This Metasploit module exploits a command injection vulnerability found in the eScan Web Management Console. The vulnerability exists while processing CheckPass login requests. An attacker with a valid username can use a malformed password to execute arbitrary commands. With mwconf privileges, th...

eScan Web Management Console Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "eScan Web Management Console Command Injection", 'Description' = %q This module exploits a command injection vulnerability found in t...

eScan Web Management Console Command Injection

This module exploits a command injection vulnerability found in the eScan Web Management Console. The vulnerability exists while processing CheckPass login requests. An attacker with a valid username can use a malformed password to execute arbitrary commands. With mwconf privileges, the runasroot...

eScan MWAdmin Interface Detection

MWAdmin, a web interface included with multiple Linux-based eScan products, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45344; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"eScan MWAdmin Interface...

eScan MWAdmin forgotpassword.php uname Parameter Arbitrary Command Execution

The version of MicroWorld eScan MWAdmin hosted on the remote web server fails to properly sanitize input to the 'uname' parameter of the 'forgotpassword.php' script before using it when calling 'exec'. A remote attacker could exploit this to execute arbitrary commands on the system. These command...

eScan Anti-Virus Detection

Binary data 5363.prm...

MicroWorld eScan Antivirus Remote Root Command Execution

!/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot =...

MicroWorld eScan Antivirus < 3.x Remote Root Command Execution

Exploit for unknown platform in category remote exploits ============================================================== MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot ...

Microworld eScan AntiVirus 3.x - Remote Code Execution

Microworld eScan AntiVirus 3.x - Remote Code Execution !/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php a...