mcafee-hip-CVE-2016-8007

mcafee-hip-CVE-2016-8007...

mcafee_atd_CVE-2019-3663

McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x and earlier - Hardcoded root password Security Bulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interesting shadow entries root@kitploit:...

exploit-CVE-2016-8016-25

McAfee Virus Scan for Linux multiple remote flaws THIS EXPLOIT AND ALL THE CODE IN THIS REPO WERE REMOVED TO AVOID ANY PROBLEMS REGARDING VIOLATING ANY MCAFEE LICENSE McAfee VirusScan Enterprise for Linux is a enterprise antivirus solution by Mcafee. Its unique, Linux-based on- access scanner...

CVE-2022-1257

CVE-2022-1257 PoC: McAfee Agent Database Credential Harvesting Made by scottk817 This script is a PoC for CVE-2022-1257 , a vulnerability in the McAfee Agent Trellix Agent when working with it's database. The vulnerability allows attackers to retrieve and decrypt credentials from the McAfee Agent...

FileInsight-plugins

FileInsight-plugins: conjunto de herramientas de descodificación del editor hexadecimal FileInsight de McAfee para el análisis de malware FileInsight-plugins es un amplio conjunto de plugins para el editor hexadecimal FileInsight de McAfee. Añade muchas capacidades como descifrado, descompresión,...

McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting

McAfee ePolicy Orchestrator before 5.10.9 Update 9 is vulnerable to a cross-site scripting vulnerability that allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. reference: -...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

mcafee-sitelist-pwd-decryption

McAfee SiteList.xml ファイル用の Python3 パスワード復号化ツール 著者: [email protected] ブログ: http://funoverip.net 日付: Feb 10 2016 参考文献: https://funoverip.net/2016/02/mcafee-sitelist-xml-password-decryption/ https://www.reddit.com/r/netsec/comments/43mni7/mcafeeprivilegedsitelistxmlleadstoactive/...

Powershell-Tools

PSUnzipper - Descompresor de PowerShell Utiliza SharpZipLiB en .NET, cargado en tiempo de ejecución sin archivo en disco - ref. https://github.com/icsharpcode/SharpZipLib Se puede usar con contraseña zip, unzip Se admiten ambos métodos de cifrado AES y ZipCrypto. Al comprimir/descomprimir - no se...

CVE-2020-7283-McAfee-Total-Protection-MTP-16.0.R26-EoP

Exploit CVE-2020-7283 El write-up se puede encontrar en el blog de RedyOps Labs: https://labs.redyops.com/index.php/2020/07/14/mcafee-total-protection-mtp-16-0-r26-escalation-of-privilege-cve-2020-7283/ Herramientas de Terceros Este código de exploit se basa en gran medida en...

LG Monitors Spotted Installing Adware-Like App on Windows PCs

Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts...

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

CVE-2023-40352

McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs...

CVE-2016-2199

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...

CVE-2022-0861

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some...

CVE-2022-0862

A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote attacker to change the password of a compromised session without knowing the existing user's password. This functionality was removed from...

CVE-2020-7295

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...

CVE-2024-34406

Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link...

CVE-2021-31839

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server...

CVE-2021-31831

Incorrect access to deleted scripts vulnerability in McAfee Database Security DBSec prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the...