356 matches found
The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.
The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...
UPDATE: XSStrike 3.1.2
PenTestIT RSS Feed My initial post about this advanced XSS detection and exploitation suite was almost an year ago! Three days ago, an update - XSStrike 3.1.2 was released. This is a post that documents these changes. What is XSStrike? XSStrike is a Cross Site Scripting detection suite equipped...
Dell Encryption and Endpoint Security Suite Enterprise Security Bypass Vulnerability
Dell Encryption and Endpoint Security Suite Enterprise are both products of Dell, Inc. Dell Encryption is a data protection solution. Endpoint Security Suite Enterprise is an enterprise endpoint security suite. A security vulnerability exists in Dell Encryption prior to version 10.0.1 and Endpoin...
CVE-2018-15766
On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password...
AWS infrastructure Security Auditing: Cloud Security Suite
CS Suite is a one stop tool for auditing the security posture of the AWS infrastructure and does system audits as well. CS Suite leverages current open source tools capabilities and has other missing checks added into one tool to rule them all. The major features include: Simple installation with...
BlueMaho v090417 - Bluetooth Security Testing Suite
BlueMaho is GUI-shell interface for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do - testing to find unknown vulns. Also it can form nice...
July 11, 2017—KB4025342 (OS Build 15063.483)
None None...
Trend Micro InterScan Messaging Security Suite DetailReportAction Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro InterScan Messaging Security Suite. Authentication is required to exploit this vulnerability. The specific flaw exists within the showPicture method of the DetailReportAction...
CVE-2017-6417
CVE-2017-6417 is a local code-injection vulnerability in Avira products (Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, Free Security Suite 15.0 and earlier) enabling a local attacker to bypass the vendors’ self-protection and...
Samsung KNOX Heap Overflow Vulnerability
Samsung KNOX is a suite of enterprise mobile security solutions from Samsung South Korea. The program offers features such as device protection, management and development options. A heap overflow vulnerability exists in the Samsung KNOX Extended OTP Service, which can be exploited by an attacker...
MS15-038: Description of the security update for Windows: April 14, 2015
None None...
Websense Appliance Manager - Command Injection
Websense Appliance Manager - Command Injection Abstract A command injection vulnerability was found in Websense Appliance Manager that allows an attacker to execute arbitrary code on the appliance. This issue can be combined with other vulnerabilities, like Cross-Site Scripting, to perform a remo...
Kali Linux "NetHunter" — Turn Your Android Device into Hacking Weapons
The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of a new Kali project, known as NetHunter, that runs on a Google Nexus device. Kali Linux is an open source Debian-based operating system for penetrati...
Super CAPTCHA <= 2.2.4 - SQL Injection
The Super CAPTCHA Security Suite – Hardened 3D CAPTCHA WordPress plugin was affected by a SQL Injection security vulnerability...
Norman Security Suite 8 (nprosec.sys) Local Privilege Escalation 0day
No description provided by source...
CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control...
Dr. Web Control Center 6.00.3.201111300 XSS Vulnerability
No description provided by source. Dr. Web Control Center Admin UI Remote Script Code Injection ============================================================= Affected Products/Versions -------------------------- Product Name: Dr. Web Enterprise Server Version Number: 6.00.3.201111300...
ZoneAlarm 8.0.20 HTTP Proxy Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet Security Suite 8.0.02...
Oracle Document Capture Actbar2.ocx Insecure Method
No description provided by source. Source: http://packetstormsecurity.org/files/view/97866/DSECRG-11-004.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL:...
Outpost Security Suite Pro 2009 Filename Parsing Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30347/info Outpost Security Suite Pro is prone to a vulnerability that allows an unauthorized attacker to bypass antivirus and firewall rules. This issue occurs because the application fails to adequately sanitize...