Researcher Claims Hotspot Shield VPN Service Exposes You on the Internet

Virtual Private Network VPN is one of the best solutions you can have to protect your privacy and data on the Internet, but you should be more vigilant while choosing a VPN service which truly respects your privacy. If you are using the popular VPN service Hotspot Shield for online anonymity and...

Hotspot Shield Vulnerability Could Reveal ‘Juicy’ Info About Users, Researcher Claims

UPDATE A vulnerability in the popular HotSpot Shield VPN client, which is promoted as being able to hide users’ identities, could expose their IP addresses and “other juicy info,” according to a security researcher. Paulos Yibelo, a researcher who has collected on a number of bug bounties in the...

Iolo System Shield AntiVirus and AntiSpyware Elevation of Privilege Vulnerability

Iolo System Shield AntiVirus and AntiSpyware is an antivirus program with anti-spyware features from Iolo Technolgies, USA. A security vulnerability exists in the amp.sys driver file in Iolo System Shield AntiVirus and AntiSpyware version 5.0.0.136, which originates from the program's failure to...

Hotspot Shield Information Disclosure Vulnerability

Hotspot Shield is a suite of VPN software for accessing free and open networks. A security vulnerability exists in Hotspot Shield that stems from the program's failure to adequately filter user input. The vulnerability can be exploited by sending a POST request to the /status.js file with the...

CVE-2018-5701

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003...

CVE-2018-5701

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003...

Design/Logic Flaw

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003...

CVE-2018-5701

CVE-2018-5701 affects Iolo System Shield/ System Mechanic amp.sys driver (v5.0.0.136 era). The vulnerability arises from improper validation of input values sent to IOCTL 0x00226003, enabling arbitrary write and local privilege escalation. Public exploit materials and PoCs (e.g., Exploit-DB and r...

CVE-2018-6460

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the...

CVE-2018-6460

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the...

CVE-2018-6460

Summary: CVE-2018-6460 affects Hotspot Shield, where a local web server (127.0.0.1:895) serves JSONP endpoints. The root cause is insufficient input filtering on the /status.js endpoint, allowing an unauthenticated POST with func=$_APPLOG.Rfunc to disclose sensitive machine data, including VPN st...

CVE-2018-6460: Exposure of Sensitive Information to an Unauthorized Actor

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the...

PT-2018-17558

Name of the Vulnerable Software and Affected Versions Hotspot Shield affected versions not specified Description The issue concerns a web server running on Hotspot Shield with a static IP address and port 895. This web server utilizes JSONP and stores sensitive configuration information. An...

Hotspot Shield Information Disclosure

Vulnerability Summary The following advisory describes a information disclosure found in Hotspot Shield. Hotspot Shield “provides secure and private access to a free and open internet. Enabling access to social networks, sports, audio and video streaming, news, dating, gaming wherever you are.”...

CVE-2018-5701: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003...

Hotspot Shield - Information Disclosure

Hotspot Shield - Information Disclosure Vulnerability Summary The following advisory describes a information disclosure found in Hotspot Shield. Hotspot Shield “provides secure and private access to a free and open internet. Enabling access to social networks, sports, audio and video streaming,...

System Shield 5.0.0.136 - Privilege Escalation

System Shield 5.0.0.136 - Privilege Escalation / Exploit Title - System Shield AntiVirus & AntiSpyware Arbitrary Write Privilege Escalation Date - 29th January 2018 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.iolo.com/ Tested Version - 5.0.0.136 Driver Version - 5.4.11.1 ...

System Shield 5.0.0.136 - Privilege Escalation

/ Exploit Title - System Shield AntiVirus & AntiSpyware Arbitrary Write Privilege Escalation Date - 29th January 2018 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.iolo.com/ Tested Version - 5.0.0.136 Driver Version - 5.4.11.1 - amp.sys Tested on OS - 64bit Windows 7 and...

Hotspot Shield - Information Disclosure

Vulnerability Summary The following advisory describes a information disclosure found in Hotspot Shield. Hotspot Shield “provides secure and private access to a free and open internet. Enabling access to social networks, sports, audio and video streaming, news, dating, gaming wherever you are.”...

Rising XP Shield suffers from DLL hijacking vulnerability

Rising XP Shield is a defense software specially designed to provide virus protection, vulnerability repair, vulnerability immunity and other functions for XP systems. Rising XP Shield has a DLL hijacking vulnerability that can be exploited by attackers to load any malicious DLL, which can cause ...