ENSLTP Arbitrary File Deletion Vulnerability

ENSLTP is a security endpoint for Linux defense from the American company McAfee McAfee. An elevation of privilege vulnerability exists in ENSLTP version 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. An attacker can exploit the vulnerability to elevate privileges and thus delete arbitrar...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

Default credentials

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

Code injection

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2017-3912

The vulnerability CVE-2017-3912 affects McAfee Application and Change Control (MACC) versions 6.2.0 and 7.0.1. A local attacker can bypass password authentication in the software’s password management feature and, via a command-line utility, execute arbitrary commands on the affected system. The ...

CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-6690

Summary of CVE-2018-6690 (MACC): McAfee Application and Change Control (MACC) on Windows clients is affected by an improper access control flaw that enables an authenticated user to trigger execution of arbitrary code when transferring files from an external system via USB. The vulnerability affe...

CVE-2017-3912 McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

PT-2018-17715 · Mcafee +1 · Mcafee Application/Change Control +1

Name of the Vulnerable Software and Affected Versions: McAfee Application and Change Control MACC versions 8.0.0 Hotfix 4 and earlier Description: The issue allows authenticated users to execute arbitrary code via file transfer from an external system. This is due to a vulnerability in accessing,...

Security Vulnerability in Smart Electric Outlets

A security vulnerability in Belkin's Wemo Insight "smartplugs" allows hackers to not only take over the plug, but use it as a jumping-off point to attack everything else on the network. From the Register: The bug underscores the primary risk posed by IoT devices and connected appliances. Because...

McAfee Night Dragon Report (Update A)

Overview McAfee has published a white paper titled “Global Energy Cyberattacks: Night Dragon,”McAfee, http://www.mcafee.com/us/resources/white-papers/wp-global-energy-cyberattacks-night-dragon.pdf, accessed February 10, 2011. which describes advanced persistent threat activity designed to obtain...

John McAfee backed Bitfi wallet pwned again

By Uzair Amir The presumably unhackable Bitfi wallet backed by John McAfee has released a statement announcing that the unhackable tag will be removed from their marketing materials. The step comes after the device’s security was compromised by a Twitter user under the name @spudowiar. The...

Hacking the Bitfi Part 3: The device with no storage

TL;DR? Here’s proof that the Bitfi has storage and that it’s been rooted. -The Bitfi boots at 20 seconds. We’re not disclosing the method yet, as there is plenty more work to be done here. If you’ve been keeping an eye on Twitter, no doubt you’ve seen the unravelling mess that is the security of...

McAfee Drive Encryption 7.1 < 7.1.3 HF1241165 or 7.2.x < 7.2.6 Authentication Bypass vulnerability

The remote host is running a version of McAfee Drive Encryption that is 7.1 7.1.3 HF1241165 or 7.2.x 7.2.6 that is affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111531; scriptversion"1.5";...

McAfee Endpoint (Drive) Encryption Installed (credentialed check)

Binary data mcafeeendpointdriveencryptioninstalled.nbin...

Hacking the Bitfi. Part 2: John McAfee’s video

The unhackable Bitfi story isn't going away any time soon. Following John McAfee's tweet yesterday that he would put out a "definitive video countering all of the nonsense claims instigated and co-coordinated by BirFi's sic established, monolithic competitors in the hardware wallet space" here's ...

CVE-2018-6686

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...