550g.mcafee.com XSS vulnerability

Open Bug Bounty ID: OBB-556922 Description| Value ---|--- Affected Website:| 550g.mcafee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Stolen security logos used to falsely endorse PUPs

To gain the trust of users, many websites and companies feature the logos of reputable firms who endorse their products. Unfortunately, some unseemly companies do the same, using logos of companies who have not, in fact, endorsed their product in order to trick people into thinking that what they...

Fighting Ransomware

No More Ransom is a central repository of keys and applications for ransomware, so people can recover their data without paying. It's not complete, of course, but is pretty good against older strains of ransomware. The site is a joint effort by Europol, the Dutch police, Kaspersky, and McAfee...

John McAfee’ Twitter account hack: “Most likely my phone was compromised”

By Waqas The official Twitter account of security guru John McAfee was apparently This is a post from HackRead.com Read the original post: John McAfee Twitter account hack: Most likely my phone was compromised...

McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker

ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...

McAfee Network Security Manager Remote Authorization Bypass Vulnerability

McAfee Network Security Manager NSM is a network security solution from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A remote authorization bypass vulnerability exists in McAfee NSM versions prior to 8.2.7.71.1. A remote attacker cou...

McAfee’s ClickProtect Apparently Infected Devices with Banking Malware

By Waqas According to a French researcher, the renowned antivirus vendor McAfee This is a post from HackRead.com Read the original post: McAfee’s ClickProtect Apparently Infected Devices with Banking Malware...

Russian 'Fancy Bear' Hackers Using (Unpatched) Microsoft Office DDE Exploit

Cybercriminals, including state-sponsored hackers, have started actively exploiting a newly discovered Microsoft Office vulnerability that Microsoft does not consider as a security issue and has already denied to patch it. Last month, we reported how hackers could leverage a built-in feature of...

McAfee Network Data Loss Prevention Information Disclosure Vulnerability (CNVD-2017-36337)

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from the American company McAfee. A security vulnerability exists in McAfee NDLP. An attacker could exploit the vulnerability to cause the response body to display other content types...

McAfee Network Data Loss Prevention server Man-in-the-Middle Attack Vulnerability

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from McAfee, Inc. in the United States. The software prevents unintentional or malicious disclosure of customer data, employee information and intellectual property information, as well as unauthorized...

McAfee Network Data Loss Prevention Cross-Site Scripting Vulnerability (CNVD-2017-36170)

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from McAfee, Inc. in the United States. The software prevents unintentional or malicious disclosure of customer data, employee and intellectual property information, as well as unauthorized transmission o...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

Cross site request forgery (csrf)

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

Design/Logic Flaw

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3933

McAfee Network Data Loss Prevention (NDLP) 9.3.x is affected by a vulnerability described as Embedding Script (XSS) in HTTP Headers, allowing remote authenticated users to view confidential information via a cross-site request forgery (CSRF) attack. The issue, as documented across multiple source...

CVE-2017-3934

CVE-2017-3934 affects McAfee Network Data Loss Prevention (NDLP) server v9.3.x. The vulnerability is due to missing HTTP Strict Transport Security (HSTS) state, enabling MITM attackers to access confidential data by reading files on the web server. Descriptions in connected CNVD/NVD entries corro...