605 matches found
CVE-2022-0615
Use-after-free in esetrtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system...
CVE-2022-0615
Use-after-free in esetrtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system...
Design/Logic Flaw
Use-after-free in esetrtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system...
CVE-2022-0615 Use-after-free vulnerability in ESET products for Linux
Use-after-free in esetrtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system...
CVE-2022-0615
CVE-2022-0615 affects the eset_rtp kernel module used in ESET’s Linux products. The vulnerability is described as a use-after-free in the kernel module, enabling a potential attacker to trigger a denial-of-service condition on the system. The available documents confirm the affected component (es...
ESET Endpoint Antivirus 资源管理错误漏洞
Eset Endpoint Antivirus is an on-premise and cloud-based anti-malware and security suite for small, medium and large organizations from Eset Slovakia. For anti-malware, remote management, endpoint security, file security, firewall, virtualization security, email security, network control and bot...
DDoS Attack and Data Wiper Malware hit Computers in Ukraine
By Waqas As per ESET, the new data wiper malware has targeted hundreds of computer systems in Ukraine, while in… This is a post from HackRead.com Read the original post: DDoS Attack and Data Wiper Malware hit Computers in Ukraine...
CVE-2022-0615
Use-after-free in esetrtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system...
New Wiper Malware Targeting Ukraine Amid Russia's Military Operation
Cybersecurity firms ESET and Broadcom's Symantec said they discovered a new data wiper malware used in fresh attacks against hundreds of machines in Ukraine, as Russian forces formally launched a full-scale military operation against the country. The Slovak company dubbed the wiper "HermeticWiper...
Iranian Hackers Using New Marlin Backdoor in 'Out to Sea' Espionage Campaign
An advanced persistent threat APT group with ties to Iran has refreshed its malware toolset to include a new backdoor dubbed Marlin as part of a long-running espionage campaign that started in April 2018. Slovak cybersecurity company ESET attributed the attacks — codenamed "Out to Sea" — to a...
Russian APT Hackers Used COVID-19 Lures to Target European Diplomats
The Russia-linked threat actor known as APT29 targeted European diplomatic missions and Ministries of Foreign Affairs as part of a series of spear-phishing campaigns mounted in October and November 2021. According to ESET's T3 2021 Threat Report shared with The Hacker News, the intrusions paved t...
CVE-2021-37852
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...
CVE-2021-37852
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...
CVE-2021-37852
The CVE-2021-37852 entry describes a local privilege-escalation in ESET products for Windows where an untrusted process impersonates the client of a named pipe. This impersonation (named-pipe client) allows a local attacker to escalate to NT AUTHORITY\SYSTEM. Documents from ZDI and NVD confirm th...
CVE-2021-37852 LPE in ESET products for Windows
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...
Multiple ESET products for macOS vulnerable to improper server certificate verification
Overview Multiple ESET products for macOS are vulnerable to improper server certificate verification CWE-295. KOBAYASHI Yasuyuki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may...
JVN#95898697: Multiple ESET products for macOS vulnerable to improper server certificate verification
Multiple ESET products for macOS are vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to alter the data received by the affected products. Solution Update the software Update the software to the latest version according to the...
ESET NOD32 Antivirus 权限许可和访问控制问题漏洞
ESET NOD32 Antivirus is a suite of antivirus software from ESET Slovakia. ESET NOD32 Antivirus suffers from a Permission License and Access Control Issue vulnerability that stems from the product not properly imposing security restrictions when using named pipes, which could lead to security...
ESET Endpoint Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ESET Endpoint Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the use of...
Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks
A previously undocumented cyber-espionage malware aimed at Apple's macOS operating system leveraged a Safari web browser exploit as part of a watering hole attack targeting politically active, pro-democracy individuals in Hong Kong. Slovak cybersecurity firm ESET attributed the intrusion to an...