9941 matches found
CVE-2010-3498
CVE-2010-3498 affects AVG Anti-Virus in the way it handles hcp:// URLs invoked by the Microsoft Help and Support Center. The root cause is improper interaction with the hcp:// protocol processing, enabling a remote attacker to execute arbitrary code when a malware payload is correctly detected bu...
CVE-2011-5100
CVE-2011-5100 affects the McAfee Firewall Reporter web interface (pre-5.1.0.13). The root cause is improper cookie authentication, allowing remote attackers to obtain access and disable anti-virus functionality via an HTTP request. The vulnerability is reflected in NVD as CVSSv2 base score 7.5 (H...
CVE-2010-3499
F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too la...
CVE-2010-3498
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...
CVE-2010-3499
CVE-2010-3499 concerns F‑Secure Anti‑Virus and its interaction with the processing of hcp:// URLs in the Microsoft Help and Support Center. The vulnerability description states that, although malware may be detected by the product, the detection approach can occur too late to stop code execution,...
Barracuda EMail Security 2.0.2 Filter Bypass / XSS
Title: ====== Barracuda EMail Security 2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=621 http://www.vulnerability-lab.com/getcontent.php?id=630 Barracuda Networks Security ID: BNSEC-304 VL-ID: ===== 621 Commo...
Iranian nuclear program hit by AC/DC virus
A scientist working at the Atomic Energy Organisation of Iran said computer systems have been hit by a cyber-attack which forced them to play AC/DC's Thunderstruck at full volume in the middle of the night. The attack came to light after a researcher at security firm F-Secure received a string of...
Barracuda SSL VPN 680 Cross Site Scripting
Exploit for php platform in category web applications Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities Introduction: ============= The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any Web...
17 years old hacker will demonstrate Linux ELF Virus at 'The Hackers Conference 2012'
The Biggest Hacking Mania has arrived - 'The Hackers Conference 2012'. In this first of its kind conference in India, Blackhat hackers drawn from around the world will demonstrate how they access a victim's personal information, and even confidential data available on the Android cell phone. The...
Android Dr. Web Anti-Virus信息泄露漏洞
Android Dr.Web Anti-virus是一款基于安卓平台的杀毒软件。 当处理com.drweb.activities.antispam.CursorActivit类中的SQL查询时存在错误，可被利用泄露呼叫历史和SMS消息。 0 Dr.Web Anti-virus for Android 7.x 厂商解决方案 Dr.Web Anti-virus for Android 7.00.2已经修复此漏洞，建议用户下载使用： http://news.drweb.com/show/?c=5&i=2573&lng=en...
[PT-2012-23] SQL Injection in Dr.Web Anti-virus
----------------------------------------------------------------------------- PT-2012-23 Positive Technologies Security Advisory SQL Injection in Dr.Web Anti-virus ----------------------------------------------------------------------------- --- Vulnerable software Dr.Web Anti-virus Version: 7.00...
Fedora Update for clamav FEDORA-2012-9577
Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2012-9577 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
Exploit for hardware platform in category web applications Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue ...
WANGKONGBAO CNS-1000 / CNS-1100 Directory Traversal
Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the /src/acloglogin.php langid and lang parameters...
Threat Outbreak Alert: Fake Portuguese Pornographic Video Email Messages on April 22, 2014
Medium Alert ID: 26252 First Published: 2012 June 26 21:46 GMT Last Updated: 2014 April 23 14:15 GMT Version: 3 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment to a pornographic video file for the...
Key Stuxnet LNK Spreading Mechanism Stops Working
One of the key infection methods for the Stuxnet worm was hard-coded to stop working on June 24, removing one of its techniques for propagation. Researchers say that the date, which is found in coded form in the worm’s instructions, is nearly three years to the day from the date that the first...
A virus specialized for AutoCAD, a perfect cyber espionage tool
A virus specialized for AutoCAD, a perfect cyber espionage tool In recent years we are assisting to a profoundly change in the nature of malware, it is increased the development for spy purposes, for its spread in both private and government sectors. The recent case of Flame malware has...
Russian Botnet Hacker arrested for hacking into six million computers
Russian Botnet Hacker arrested for hacking into six million computers Police have detained a 22-year-old hacker who created a system of networked computers that was used to steal more than 150 million rubles $4.47 million from people's bank accounts and already one of the most wanted hacker in th...
WebTitan v 3.62 - Multiple Cross Site Vulnerabilities
Document Title: =============== WebTitan v 3.62 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=589 Release Date: ============= 2012-06-20 Vulnerability Laboratory ID VL-ID: ==================================== 589...
