McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)

An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files an...

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files and obtain sensitive information. This may aid in launching further attacks...

Citadel Banking Malware Targets Payza Payment Service

A new variant of Citadel malware is making the rounds that is targeting Payza, a money transfer service popular all over the world, especially in developing nations that are under-serviced when it comes to accessing the Internet. The payment processing company bills itself as “your money’s gatewa...

Trellix ePolicy Orchestrator Application Server Detection

ePolicy Orchestrator ePO Application Server, a web interface for ePO, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66318; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/14";...

McAfee ePolicy Orchestrator 4.6.x Multiple Vulnerabilities (SB10042)

According to its self-reported version, the version of McAfee ePolicy Orchestrator running on the remote host has the following vulnerabilities : - An unspecified SQL injection vulnerability exists in the Agent-Handler component. A remote, unauthenticated attacker could exploit this to execute...

Adobe to Patch Reader Information Leak Bug

Adobe is planning to patch a fairly low severity security vulnerability in all of the current versions of Reader and Acrobat that could enable an attacker to track which users have opened a certain PDF document. The vulnerability can’t be used for code execution, but researchers say it could be...

CVE-2013-0141

Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...

CVE-2013-0140

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...

CVE-2013-0140

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...

CVE-2013-0141

Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...

Directory traversal

Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...

Sql injection

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...

CVE-2013-0141

Summary (CVE-2013-0141): A directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) allows a remote attacker to upload arbitrary files via a crafted request over the Agent-Server communication channel, demonstrated by writing to the Software/ directory. It affects ePO versions prior...

CVE-2013-0141

Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...

CVE-2013-0140

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...

CVE-2013-0140

CVE-2013-0140 describes a SQL injection vulnerability in the Agent-Handler component of McAfee ePolicy Orchestrator (ePO) , affecting versions before 4.5.7 and 4.6.x before 4.6.6. A remote attacker can execute arbitrary SQL commands by sending a crafted request over the Agent-Server communication...

Adobe Reader PDF-tracking vulnerability reveals when and where PDF is opened

McAfee said it has found a vulnerability in Adobe Systems' Reader program that reveals when and where a PDF document is opened. The issue emerges when some users launch a link to another file path, which calls on a JavaScript application programming interface API, while Reader alerts a user when...

Adobe Reader PDF-tracking vulnerability reveals when and where PDF is opened

McAfee said it has found a vulnerability in Adobe Systems' Reader program that reveals when and where a PDF document is opened. The issue emerges when some users launch a link to another file path, which calls on a JavaScript application programming interface API, while Reader alerts a user when...

McAfee ePolicy Orchestrator 4.6.4 and earlier pre-authenticated SQL injection and directory path traversal vulnerabilities

Overview McAfee ePolicy Orchestrator 4.6.4 and earlier contains a pre-authenticated sql injection and directory path traversal vulnerability which could allow an attacker to inject malicious code into the system. Description McAfee ePolicy Orchestrator 4.6.4 and earlier contains a pre-authenticat...