Panda Internet Security 2014 (19.01.01) Privilege Escalation Vulnerability (CVE-2014-3450) - Windows

Panda Products is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Panda Internet Security <= 16.1.2 Privilege Escalation Vulnerability

Panda Internet Security is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Internet Security Sandbox Escape Security Bypass Vulnerability

Avast Internet Security is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Internet Bug Bounty: Use After Free in PHP7 unserialize()

The bug reported at: https://bugs.php.net/bug.php?id=72978...

CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email...

CVE-2016-4025

CVE-2016-4025 affects multiple Avast products (e.g., Internet Security, Pro Antivirus, Premier, Free Antivirus, Business/Endpoint Protection variants, and related suites) and is described as a security bypass of the DeepScreen feature. The vulnerability is triggered via a DeviceIoControl call, al...

CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email...

Google to Make Certificate Transparency Mandatory By 2017

Google is making Certificate Transparency mandatory for its Chrome web browser by October 2017. Google software engineer Ryan Sleevi made the announcement in conjunction with the CA/Browser Forum that took place in Redmond, Washington last week. The move is an attempt to reduce the number of doma...

Panda Internet Security 17.0.1 Privilege Escalation

Panda Internet Security v17.0.1 - Unquoted Service Path Privilege Escalation ===================================================== Panda Internet Security v17.0.1 - Unquoted Service Path Privilege Escalation ===================================================== Vendor Homepage:...

Panda Security PSEvents Privilege Escalation Exploit

PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges. When run, it checks a user writable folder for certain DLL files, and if any are found they are automatically run. Vulnerable products include Panda Global Protection 2016 versions 16.1.2 and below, Panda...

IoT Botnets Are The New Normal of DDoS Attacks

If you’ve been on the wrong end of what passes for a modern-day DDoS attack, you’re well familiar with the firepower of the almighty DVR. That’s right, the innocuous set-top box responsible for the posterity of your Game of Thrones seasons 1-6 is behind some of the biggest swarming attacks agains...

Source Code Released for Mirai DDoS Malware

The dangers of haphazardly connecting embedded devices to the Internet have manifested themselves in mammoth distributed denial-of-service attacks, in particular one two weeks ago against security journalist Brian Krebs’ website that peaked at better than 620 Gbps. The situation worsened over the...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...

Trend Micro Internet Security vulnerability where files may be excluded as scan targets

Overview Trend Micro Internet Security provided by Trend Micro Incorporated contains a vulnerability where arbitrary files or folders may be excluded as scan targets when the conditions below are met. An attacker can place a specific file into the system The attacker can execute a specific API fr...

JVN#98126322: Trend Micro Internet Security vulnerability where files may be excluded as scan targets

Trend Micro Internet Security provided by Trend Micro Incorporated contains a vulnerability where arbitrary files or folders may be excluded as scan targets when the conditions below are met. An attacker can place a specific file into the system The attacker can execute a specific API from the...

Kaspersky Internet Security Denial of Service Vulnerability

Kaspersky Internet Security KIS, Kaspersky Security Software is a set of security software developed by Russia's Kaspersky Lab Kaspersky Lab with both antivirus and firewall functions. There are security vulnerabilities in KIS. A local attacker can exploit this vulnerability with a specially...

Breaching a CA &#8211; Blind Cross-site Scripting (BXSS) in the GeoTrust SSL Operations Panel Using XSS Hunter

This is a continuation of a series of blog posts which will cover blind cross-site scripting XSS and its impact on the internal systems which suffer from it. Previously, we’ve shown that data entered into one part of a website, such as the account information panel, can lead to XSS on internal...

Local Denial of Service Vulnerability in Multiple Kaspersky Products

Kaspersky Internet Security is a suite of security software that combines the functions of an antivirus and a firewall.Kaspersky Antivirus/Total Security is an antivirus program from Kaspersky Labs. A local denial of service vulnerability exists in several Kaspersky products, which could be...

Multiple Kaspersky Products Information Disclosure Vulnerabilities

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall functionality.Kaspersky Antivirus and Total Security are both antivirus programs from Kaspersky Labs. An information disclosure vulnerability exists in several Kaspersky products, which could be...

Kaspersky Internet Security KLIF Driver NtAdjustTokenPrivileges_HANDLER Denial of Service

Summary A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user mo...