CVE-2018-6678 McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability

Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway MWG MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors...

CVE-2018-6677 McAfee Web Gateway (MWG) - Directory Traversal vulnerability

Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway MWG MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors...

PT-2018-17709 · Mcafee · Mcafee Web Gateway

Name of the Vulnerable Software and Affected Versions: McAfee Web Gateway versions 7.8.1.x Description: The issue allows authenticated administrator users to execute arbitrary commands via unspecified vectors in the administrative interface. Recommendations: For McAfee Web Gateway version 7.8.1.x...

PT-2018-17708 · Mcafee · Mcafee Web Gateway

Name of the Vulnerable Software and Affected Versions: McAfee Web Gateway versions 7.8.1.x Description: A Directory Traversal issue in the administrative user interface allows authenticated administrator users to gain elevated privileges via unspecified vectors. Recommendations: For McAfee Web...

CVE-2018-6681

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management NSM 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface...

Design/Logic Flaw

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management NSM 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface...

CVE-2018-6681

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management NSM 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface...

CVE-2018-6681

CVE-2018-6681 is an Abuse of Functionality vulnerability in McAfee Network Security Management (NSM) 9.1.7.11 and earlier. The issue occurs in the web interface where authenticated users can cause arbitrary HTML to be reflected in the response page, via the appliance’s web interface. Affected sof...

PT-2018-17710 · Mcafee · Mcafee Network Security Management

Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management NSM versions 9.1.7.11 and earlier Description: The issue allows authenticated users to inject arbitrary HTML code into the response web page via the appliance web interface, potentially leading to abuse of...

Hacker Puts Airport's Security System Access On Dark Web Sale For Just $10

If you can't find it on Google, you will definitely find it on the Dark Web. Black markets on the Dark web are not known for just buying drugs, it is a massive hidden network where you can buy pretty much anything you can imagine—from pornography, weapon, and counterfeit currencies, to hacking...

Organizations Leave Backdoors Open to Cheap Remote Desktop Protocol Attacks

ARCHIVED STORY Organizations Leave Backdoors Open to Cheap Remote Desktop Protocol Attacks By John Fokker · July 11, 2018 Thanks to my colleague Christiaan Beek for his advice and contributions. While researching underground hacker marketplaces, the McAfee Advanced Threat Research team has...

McAfee ePolicy Orchestrator CSV File Handling Arbitrary Command Execution (SB10227)

The remote host is running a version of McAfee ePolicy Orchestrator that contains a flaw that is triggered as user-supplied input passed via CSV files is not properly sanitized. This may allow a context- dependent attacker to potentially execute arbitrary commands. C Tenable Network Security, Inc...

CVE-2018-6667

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions JMX...

CVE-2018-6667

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions JMX...

CVE-2018-6667 McAfee Web Gateway - Authentication Bypass vulnerability

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions JMX...

CVE-2018-6667

CVE-2018-6667 affects McAfee Web Gateway 7.8.1.0–7.8.1.5, where an authentication bypass in the administrative UI allows remote attackers to execute arbitrary code via Java Management Extensions (JMX). The root cause is an authentication bypass in the web management interface, enabling unauthenti...

McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2018-14365)

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An information disclosure vulnerability exists in McAfee ePO versions 5.3.0...

McAfee ePolicy Orchestrator Access Bypass Vulnerability

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. There is a security vulnerability in McAfee ePO. A remote attacker could explo...

APT15 Pokes Its Head Out With Upgraded MirageFox RAT

The elusive APT15 cyber-espionage group, believed to be affiliated with the Chinese government, has been spotted for the first time in many months, mounting a highly targeted spy campaign using an upgraded version of the Mirage remote access trojan. This is the first evidence of the China-linked...

McAfee Network Security Manager and Network Data Loss Prevention Session Fixation Vulnerability

McAfee Network Security Manager NSM and Network Data Loss Prevention NDLP are both products from McAfee, Inc. McAfee Network Security Manager NSM is a network security solution that monitors in real time the deployment of McAfee Intrusion Prevention Systems throughout the network. network Data Lo...