f-secure.com.pl XSS vulnerability

Vulnerable URL: http://www.f-secure.com.pl/kup-teraz-f-secure-anti-virus.html?action=%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2017 Latest check for patch:| 11.10.2017 11:32 GMT Vulnerability type:| XSS...

F-Secure Anti-Virus Remote Code Execution Vulnerability

F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

Input validation

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

CVE-2017-6466 affects F-Secure Software Updater 2.20 (as distributed in several F-Secure products). The issue: updates are downloaded over plain HTTP and lack post-download integrity validation, enabling MITM attackers to replace the downloaded file; the executable could run under the SYSTEM acco...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

Free Open Source Self Hosted VirusTotal: Malice

Free Open Source Self Hosted VirusTotal Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.’ Ubuntu Install: Install Go $ sudo add-apt-repository ppa:ubuntu-lxc/lxd-stable $ sudo apt-get updat...

Multiple Vulnerabilities in F-Secure KEY for Desktop

F-Secure KEY for Desktop is a password manager from the Finnish company F-Secure. A security vulnerability exists in F-Secure KEY for Desktop versions 4.3.101 through 4.3.129. An attacker can exploit the vulnerability to execute arbitrary script code in the context of the affected site, steal...

Unspecified Vulnerability in F-Secure SAFE for Mac

F-Secure SAFE for Mac is a suite of antivirus software for Mac from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE for Mac versions 15.0 through 16.1. An attacker can exploit the vulnerability to send bank security notices on non-banking websites, bypass browser...

F-Secure Online Scanner Arbitrary Code Execution Vulnerability

F-Secure Online Scanner is a suite of software for scanning and cleaning PCs from the Finnish company F-Secure. An arbitrary code execution vulnerability exists in F-Secure Online Scanner. An attacker could exploit this vulnerability by tricking a legitimate user into opening a specially crafted...

Three Politicians Hacked Using Unsecured Wi-Fi Network

If you are one of our readers who follow The Hacker News every update, you probably know that Public WiFi network is a security risk. But many people aren’t aware, including our great politicians. Internet security provider F-Secure carried out an experimental hack against three prominent UK...

OnionDuke APT Malware served through Tor Network

The malicious Russian Tor exit node, which was claimed to be patching binary files, is actually distributing a malware program to launch cyber-espionage attacks against European government agencies. The group behind the rogue Tor exit node had likely been infecting files for more than a year,...

F-Secure Key Plaintext Information Disclosure

The remote Windows host has a version of F-Secure Key prior to 1.5.145. It is, therefore, affected by an unspecified error that could allow a local attacker to dump the contents of memory and obtain sensitive plaintext information. C Tenable Network Security, Inc. include"compat.inc"; if...

F-Secure Key Plaintext Information Disclosure (Mac OS X)

The version of F-Secure Key installed on the remote Mac OS X host is older than 1.5.146. It is, therefore, affected by an unspecified error that could allow a local attacker to dump the contents of memory and obtain sensitive plaintext information. C Tenable Network Security, Inc...

F-Secure Key Detection (Mac OS X)

Binary data macosxfsecurekeyinstalled.nbin...

F-Secure Key Detection

Binary data fsecurekeyinstalled.nbin...

F-Secure Multiple Products ActiveX SEH Overwrite Vulnerability (Heap Spray)

No description provided by source. Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Exploit-DB Notes: moved to 'local' since you have to run it as...

F-Secure Policy Manager 7.00 FSMSH.DLL Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24233/info F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions. Exploiting this issue allows remote attackers to crash affect...

F-Secure BackWeb 6.31 Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10055/info A vulnerability has been reported in F-Secure BackWeb that may permit local attackers to gain system level privileges. The source of this vulnerability is that certain areas within the BackWeb interface permit...

LHA 1.x - Buffer Overflow/Directory Traversal Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10243/info LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. The first issues reported have be...