Report: UK Firm Offered Custom Malware to Egyptian Security Services

Documents spilled into public by the political unrest in Egypt in recent months has shone a spotlight on the shadowy world of for-profit, custom malware creation for governments around the world. The anti malware firm F-Secure first called attention to documents uncovered by protesting Egyptians...

F-Secure Anti-Virus Detection and Status

Binary data wmifsecureavcheck.nbin...

F-Secure Policy Manager 'WebReporting' Module XSS And Path Disclosure Vulnerabilities

This host is running F-Secure Policy Manager and is prone to cross site scripting and path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbfsecurepolicymanagerxssnpathdiscvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ F-Secure Policy Manager 'WebReporting' Module XSS And Path...

F-Secure Policy Manager 'WebReporting' Module XSS And Path Disclosure Vulnerabilities

F-Secure Policy Manager is prone to cross-site scripting XSS and path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2011-1102

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1103

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

Design/Logic Flaw

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

CVE-2011-1102

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1102

CVE-2011-1102 affects the F-Secure Policy Manager WebReporting module. The vulnerability enables cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product versions include Policy Manager 7.x, 8.00 before hotfix 2, 8.1x...

CVE-2011-1103

CVE-2011-1103 affects the notmuch package in Fedora (Fedora 15–17) with updates FEDORA-2012-3312/3315 addressing a tag information disclosure flaw. Root cause: information disclosure via tag metadata. Impact stated as information disclosure; no exploitation details provided. Remediation: apply th...

CVE-2011-1103

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

CVE-2011-1102: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1103: Exposure of Sensitive Information to an Unauthorized Actor

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

F-Secure Internet Gatekeeper Detection (HTTP)

HTTP based detection of F-Secure Internet Gatekeeper. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F-Secure Internet Gatekeeper Log File Information Disclosure Vulnerability

F-Secure Internet Gatekeeper is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information. Information obtained may lead to other attacks. OpenVAS Vulnerability Test $Id: gbfsecureinternetgatekeeper46381.nasl 7052 2017-09-04 11:50:5...

F-Secure Internet Gatekeeper Log File Information Disclosure Vulnerability

F-Secure Internet Gatekeeper is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

CVE-2011-0453

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

Authentication flaw

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

CVE-2011-0453

The CVE covers F-Secure Internet Gatekeeper for Linux, 3.x (pre-3.03). The vulnerability is an authentication flaw that allows reading access logs via the admin UI port, enabling remote attackers to obtain potentially sensitive information from log files. Affected product: F-Secure Internet Gatek...