Free Movie Download and Streaming Sites — Watch HD Movies Online

When you search for "free movie download" or "watch free movies online," search engines present a long list of websites. However, be cautious. Many free movie sites can lead to harmful computer viruses that could infect or, in the worst case, take control of your computer. Additionally, many...

SubScraper - External Pentest Tool That Performs Subdomain Enumeration Through Various Techniques

SubScraper uses DNS brute force, Google & Bing scraping, and Virus Total to enumerate subdomains without an API. Written in Python3, SubScraper performs HTTPS requests and DNS "A" record lookups during the enumeration process to validate discovered subdomains. This provides further information to...

CVE-2018-17776

PCProtect Anti-Virus v4.8.35 has "Everyone: F" permission for %PROGRAMFILESX86%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

Code injection

PCProtect Anti-Virus v4.8.35 has "Everyone: F" permission for %PROGRAMFILESX86%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2018-17776

PCProtect Anti-Virus v4.8.35 has "Everyone: F" permission for %PROGRAMFILESX86%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2018-17776

PCProtect Anti-Virus v4.8.35 has "Everyone: F" permission for %PROGRAMFILESX86%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2018-17776

CVE-2018-17776 affects PCProtect Anti-Virus v4.8.35. The vulnerability arises from overly permissive ACL on %PROGRAMFILES(X86)%\PCProtect, granting Everyone: (F) and enabling local users to replace an executable with a Trojan horse to gain privileges (local privilege escalation). Root cause: inco...

Threat Roundup Sept 21 - 28

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between Sept. 21 and 28. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, we will summarize the threats we’ve observed by...

PCProtect 4.8.35 - Privilege Escalation

Exploit Title: PCProtect 4.8.35 - Privilege Escalation Date: 2018-09-11 Exploit Author: Hashim Jawad - @ihack4falafel Vendor Homepage: https://www.pcprotect.com/ Vulnerable Software: https://www.pcprotect.com/download Tested on: Windows 7 Enterprise SP1 x64 Description: PCProtect Anti-Virus v4.8....

Firewalls and the Need for Speed

I was looking for resources on campus network design and found these slides pdf from a 2011 Network Startup Resource Center presentation. These two caught my attention: This bothered me, so I Tweeted about it. This started some discussion, and prompted me to see what NSRC suggests for architectur...

K7 Anti-Virus Premium Detection (Windows SMB Login)

Detects the installed version of K7 Anti-Virus Premium. The script logs in via smb, searches for K7 Anti-Virus Premium in the registry and gets the version from SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

K7 Anti-Virus Premium Multiple Vulnerabilities (Nov 2017)

K7 Anti-Virus Premium is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian: Security Advisory (DLA-1461-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SharpShooter - Payload Generation Framework

SharpShooter is a payload creation framework for the retrieval and execution of arbitrary CSharp source code. SharpShooter is capable of creating payloads in a variety of formats, including HTA, JS, VBS and WSF. It leverages James Forshaw's DotNetToJavaScript tool to invoke methods from the...

Debian DLA-1461-1 : clamav security update

ClamAV, an anti-virus utility for Unix, has released the version 0.100.1. Installing this new version is required to make use of all current virus signatures and to avoid warnings. This version also fixes two security issues discovered after version 0.100.0 : CVE-2018-0360 Integer overflow with a...

Threat Outbreak Alert RuleID33317: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58703 First Published: 2018 August 15 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33317 may contain the following files: Name |...

Threat Outbreak Alert RuleID33320: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58706 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33320 may contain the following files: Name |...

Threat Outbreak Alert RuleID33379: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58752 First Published: 2018 August 15 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33379 may contain the following files: Name |...

Threat Outbreak Alert RuleID33375: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58751 First Published: 2018 August 15 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33375 may contain the following files: Name |...

Threat Outbreak Alert RuleID33321: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58713 First Published: 2018 August 15 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33321 may contain the following files: Name |...