CVE-2018-10018

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

CVE-2018-10018

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

CVE-2018-10018

The CVE-2018-10018 entry concerns G DATA Total Security 25.4.0.3, where the GDASPAMLib.AntiSpam ActiveX control (ASK\GDASpam.dll) suffers a buffer overflow triggered by a long IsBlackListed argument. The issue affects the ActiveX component within the Total Security suite; impact is described as p...

CVE-2018-10018

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

Total AV 4.6.19 Insecure Permissions

===== Tempest Security Intelligence - ADV-23/2018 === Total AV 4.1.7 4 .6.19 - Insecure Permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detailed description...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow 'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" m...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow Exploit

Exploit for windows platform in category dos / poc 'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackL...

G DATA TOTAL SECURITY 25.4.0.3 Active-X Buffer Overflow

===== Tempest Security Intelligence - ADV-24/2018 === G DATA TOTAL SECURITY v25.4.0.3 Activex Buffer Overflow Author: Filipe Xavier Oliveira Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents ===================================================== Overview Detailed...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" memberName = "IsBlackListed" progid = "GDASPAMLib.AntiSpam...

Electro Industries GaugeTech Total Web Solutions Remote Detection

Detection of Electro Industries GaugeTech Total Web Solutions. The script sends a connection request to the remote host and attempts to detect if the remote host is Electro Industries GaugeTech Total Web Solutions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpte...

Two Zero-Day Exploits Found After Someone Uploaded 'Unarmed' PoC to VirusTotal

Security researchers at Microsoft have unveiled details of two critical and important zero-day vulnerabilities that had recently been discovered after someone uploaded a malicious PDF file to VirusTotal, and get patched before being used in the wild. In late March, researchers at ESET found a...

CVE-2018-12082

The mintToken function of a smart contract implementation for Fujinto NTO, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Code injection

The mintToken function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Code injection

The mintToken function of a smart contract implementation for PolyAI AI, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Code injection

The mintToken function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The mintToken function of a smart contract implementation for Fujinto NTO, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

VirusTotal Code Execution Vulnerability

VirusTotal is a suite of antivirus software. The software is able to detect types of malware by analyzing suspicious files and URLs. A security vulnerability exists in VirusTotal. The vulnerability can be exploited by maliciously crafted multi-fat binary programs Universal/fat binary to bypass...

Security Bulletin: TSSC/IMC is affected by vulnerability for xorg-x11-server (CVE-2015-0255)

Summary The Total Storage System Console/TS4500 Integrated Management Console is affected by a vulnerability involving the xorg-x11-server Vulnerability Details CVEID: CVE-2015-0255 DESCRIPTION: X.Org X Server could allow a remote attacker to obtain sensitive information, caused by the improper...

Security Bulletin: TS3000 (TSSC/IMC) is affected by OpenSSL vulnerabilities

Summary The Total Storage System Console/TS4500 Integrated Management Console is affected by seven security vulnerabilities related to OpenSSL. Vulnerability Details CVEID: CVE-2015-0209 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a...