PT-2022-24250 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions prior to 19.0 Description: A Drag and Drop spoof vulnerability was discovered, allowing a spoofing of the address bar when a user performs a drag and drop operation on the address bar. Recommendations: For...

What Does The Fox Hack? Breaking Down the Anonymous Fox F-Automatical Script

While performing routine security research, one of our threat analysts discovered the latest version of a Command and Control C2 script, which is referred to as F-Automatical within the script’s code and was commonly known as FoxAuto in older versions. This is the seventh version of this automati...

CVE-2022-38162

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

Cross site scripting

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

CVE-2022-38162

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

CVE-2022-38162

CVE-2022-38162 describes a reflected XSS in WithSecure’s F-Secure Policy Manager caused by an unvalidated parameter in a vulnerable endpoint. Affected software is WithSecure/Policy Manager (versions up to 2022-08-10 per sources). The vulnerability enables remote attackers to inject malicious inpu...

CVE-2022-28887

Multiple Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash...

Denial of service

Multiple Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash...

CVE-2022-28887 Multiple Denial of Service Vulnerability

Multiple Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash...

CVE-2022-28887 Multiple Denial of Service Vulnerability

Multiple Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash...

CVE-2022-28887

CVE-2022-28887 describes a Denial-of-Service condition in F-Secure & WithSecure products. The vulnerability stems from the aerdl.dll unpacker handler function , which can crash the scanning engine, leading to a potential service disruption. Public details consistently reference a DoS impact but d...

PT-2022-19292 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure & WithSecure products affected versions not specified Description: A Denial-of-Service DoS issue was found in F-Secure & WithSecure products. The aerdl.dll unpacker handler function can crash, potentially causing the scanning engine ...

Researchers Uncover Covert Attack Campaign Targeting Military Contractors

A new covert attack campaign singled out multiple military and weapons contractor companies with spear-phishing emails to trigger a multi-stage infection process designed to deploy an unknown payload on compromised machines. The highly-targeted intrusions, dubbed STEEPMAVERICK by Securonix, also...

The vulnerability in the findfile.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Denial of service

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-28886 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-28886 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-28886

CVE-2022-28886 affects F-Secure and WithSecure products. The aerdl.so/aerdl.dll component may enter an infinite loop while unpacking PE files, potentially crashing the scanning engine. The available sources indicate a DoS impact without detailing affected versions or a published fix in the provid...

PT-2022-19291 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure and WithSecure products affected versions not specified Description: A Denial-of-Service issue was discovered in F-Secure and WithSecure products. The aerdl.so or aerdl.dll component may enter an infinite loop when unpacking PE files...

f-net.co.kr Cross Site Scripting vulnerability OBB-2924750

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...