McAfee Enterprise Security Manager Detection

This script performs SSH based detection of McAfee Enterprise Security Manager SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

McAfee Enterprise Security Manager Authentication Bypass Vulnerability

A specially crafted username can bypass SIEM ESM authentication password is not validated if the ESM is configured to use Active Directory or LDAP authentication sources. This can result in the attacker gaining NGCP master user access to the ESM. SPDX-FileCopyrightText: 2015 Greenbone AG Some tex...

McAfee Enterprise Security Manager OS Command Injection Vulnerability (SB10133)

McAfee Enterprise Security Manager ESM is prone to an OS command injection vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authentication flaw

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote...

CVE-2015-8024

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote...

CVE-2015-8024

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote...

CVE-2015-8024

McAfee Enterprise Security Manager (ESM), including ESMLM and ESMREC, is affected on versions 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8 when configured with Active Directory/LDAP. The issue is an authentication bypass caused by improper handling of usernames, allowi...

McAfee Agent (MA) Log Viewing Functionality Directory Traversal Vulnerability

McAfee Agent is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:mcafeeagent"...

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field SEH Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 18/11/2015 Vendor Homepage :...

SuperScan 4.1 Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Scan Hostname/IP Field Buffer Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage : http://www.foundstone.com Software Link :...

SuperScan 4.1 - Windows Enumeration HostnameIPURL Field Overflow (SEH)

SuperScan 4.1 - Windows Enumeration HostnameIPURL Field Overflow SEH !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015...

SuperScan 4.1 - Tools Hostname/IP/URL Field Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Tools Hostname/IP/URL Field Buffer Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage : http://www.foundstone.com Software Link :...

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field Overflow (SEH)

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage : http://www.foundstone.com Software Link :...

McAfee Vulnerability Manager Multiple CSRF Vulnerabilities

McAfee Vulnerability Manager is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

McAfee founder: the Surface Pro 4 will have a 1 0 0 security vulnerabilities-vulnerability warning-the black bar safety net

Microsoft's next generation Surface Pro 4 fusion their Windows 1 0 OS, Intel Skylake six-generation Core Processor, the overall performance is still very good, of course, also added a variety of hardware and software security features, however, McAfee's founder John McAfee may not be so confident...

McAfee ESM SIEM Detection

Binary data mcafeeesmsiemdetect.nbin...

McAfee Vulnerability Manager 'Organizations' Cross-Site Request Forgery Vulnerability

McAfee Vulnerability Manager is a vulnerability management application. A cross-site request forgery vulnerability exists on the McAfee Vulnerability Manager 'Organizations' page, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user context...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors...

CVE-2015-7612

McAfee Vulnerability Manager (MVM) Enterprise Manager up to version 7.5.9 has CSRF vulnerabilities on the Organizations page. The root cause is cross-site request forgery, enabling remote attackers to hijack administrator authentication for requests with unspecified impact via unknown vectors. Th...

CVE-2015-7612

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors...