879 matches found
CVE-2015-8264: Untrusted Search Path
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe...
f-secure.com.pl XSS vulnerability
Vulnerable URL: http://www.f-secure.com.pl/kup-teraz-f-secure-anti-virus.html?action=%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2017 Latest check for patch:| 11.10.2017 11:32 GMT Vulnerability type:| XSS...
F-Secure Anti-Virus Remote Code Execution Vulnerability
F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...
Input validation
F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...
CVE-2017-6466
F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...
CVE-2017-6466
F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...
CVE-2017-6466
CVE-2017-6466 affects F-Secure Software Updater 2.20 (as distributed in several F-Secure products). The issue: updates are downloaded over plain HTTP and lack post-download integrity validation, enabling MITM attackers to replace the downloaded file; the executable could run under the SYSTEM acco...
CVE-2017-6466: Improper Input Validation
F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...
Free Open Source Self Hosted VirusTotal: Malice
Free Open Source Self Hosted VirusTotal Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.’ Ubuntu Install: Install Go $ sudo add-apt-repository ppa:ubuntu-lxc/lxd-stable $ sudo apt-get updat...
Multiple Vulnerabilities in F-Secure KEY for Desktop
F-Secure KEY for Desktop is a password manager from the Finnish company F-Secure. A security vulnerability exists in F-Secure KEY for Desktop versions 4.3.101 through 4.3.129. An attacker can exploit the vulnerability to execute arbitrary script code in the context of the affected site, steal...
Unspecified Vulnerability in F-Secure SAFE for Mac
F-Secure SAFE for Mac is a suite of antivirus software for Mac from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE for Mac versions 15.0 through 16.1. An attacker can exploit the vulnerability to send bank security notices on non-banking websites, bypass browser...
F-Secure Online Scanner Arbitrary Code Execution Vulnerability
F-Secure Online Scanner is a suite of software for scanning and cleaning PCs from the Finnish company F-Secure. An arbitrary code execution vulnerability exists in F-Secure Online Scanner. An attacker could exploit this vulnerability by tricking a legitimate user into opening a specially crafted...
Three Politicians Hacked Using Unsecured Wi-Fi Network
If you are one of our readers who follow The Hacker News every update, you probably know that Public WiFi network is a security risk. But many people aren’t aware, including our great politicians. Internet security provider F-Secure carried out an experimental hack against three prominent UK...
OnionDuke APT Malware served through Tor Network
The malicious Russian Tor exit node, which was claimed to be patching binary files, is actually distributing a malware program to launch cyber-espionage attacks against European government agencies. The group behind the rogue Tor exit node had likely been infecting files for more than a year,...
F-Secure Key Plaintext Information Disclosure
The remote Windows host has a version of F-Secure Key prior to 1.5.145. It is, therefore, affected by an unspecified error that could allow a local attacker to dump the contents of memory and obtain sensitive plaintext information. C Tenable Network Security, Inc. include"compat.inc"; if...
F-Secure Key Plaintext Information Disclosure (Mac OS X)
The version of F-Secure Key installed on the remote Mac OS X host is older than 1.5.146. It is, therefore, affected by an unspecified error that could allow a local attacker to dump the contents of memory and obtain sensitive plaintext information. C Tenable Network Security, Inc...
F-Secure Key Detection (Mac OS X)
Binary data macosxfsecurekeyinstalled.nbin...
F-Secure Key Detection
Binary data fsecurekeyinstalled.nbin...
MAILsweeper - SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2 & 5.2.1 - File Scanner Malicious Archive DoS
No description provided by source. source: http://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content. These products handle compressed files by temporarily unzipping them and...
F-Secure BackWeb 6.31 Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10055/info A vulnerability has been reported in F-Secure BackWeb that may permit local attackers to gain system level privileges. The source of this vulnerability is that certain areas within the BackWeb interface permit...