jetlib.sec » Tags » saas

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

8 items tagged "saas"

Related tags: code execution [+], mcafee [+], myasutil [+], user [+], s system [+], code [+], tpti [+], command execution [+], vulnerability [+], script injection [+], mycioscn [+], mycioscan [+], exploits [+], endpoint [+], design flaw [+], day [+]

• January 17, 2012
• 14:00

  [remote exploits] - McAfee SaaS MyCioScan ShowReport Remote Command Execution

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - McAfee SaaS MyCioScan ShowReport Remote Command Execution

  Tags:  mcafee mycioscan saas command-execution exploits  

• January 12, 2012
• 13:00

  Bugtraq: ZDI-12-012 : (0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution

   » ‎ SecurityFocus Vulnerabilities
  ZDI-12-012 : (0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution

  Tags:  day mcafee saas command-execution  

• August 09, 2011
• 12:00

  Bugtraq: TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability

  Tags:  mcafee saas mycioscn tpti code-execution script-injection  

• 12:00

  Bugtraq: TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability

  Tags:  myasutil mcafee saas tpti code-execution design-flaw  

• August 08, 2011
• 18:55

  McAfee SaaS MyAsUtil5.2.0.603.dll Code Execution

   » ‎ Packet Storm Security Advisories
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the MyAsUtil5.2.0.603.dll which exposes an ActiveX control. First, XSS can be used to bypass the domain execution policy implemented in MyASUtil.SecureObjectFactory.CreateSecureObject() to create an instance of MyASUtil.InstallInfo. Then, MyASUtil.InstallInfo.RunUserProgram() can be used to execute code on the user's system. Additionally, many other objects and interfaces on the user's system can likely be abused using this general mechanism.

  Tags:  code myasutil user code-execution s-system saas  

• 18:55

  McAfee SaaS MyAsUtil5.2.0.603.dll Code Execution

   » ‎ Packet Storm Security Recent Files
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the MyAsUtil5.2.0.603.dll which exposes an ActiveX control. First, XSS can be used to bypass the domain execution policy implemented in MyASUtil.SecureObjectFactory.CreateSecureObject() to create an instance of MyASUtil.InstallInfo. Then, MyASUtil.InstallInfo.RunUserProgram() can be used to execute code on the user's system. Additionally, many other objects and interfaces on the user's system can likely be abused using this general mechanism.

  Tags:  code myasutil user code-execution s-system saas  

• 18:55

  McAfee SaaS MyAsUtil5.2.0.603.dll Code Execution

   » ‎ Packet Storm Security Misc. Files
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the MyAsUtil5.2.0.603.dll which exposes an ActiveX control. First, XSS can be used to bypass the domain execution policy implemented in MyASUtil.SecureObjectFactory.CreateSecureObject() to create an instance of MyASUtil.InstallInfo. Then, MyASUtil.InstallInfo.RunUserProgram() can be used to execute code on the user's system. Additionally, many other objects and interfaces on the user's system can likely be abused using this general mechanism.

  Tags:  code myasutil user code-execution s-system saas  

• 0:00

  Vuln: McAfee SaaS Endpoint Protection 'myCIOScn' ActiveX Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  McAfee SaaS Endpoint Protection 'myCIOScn' ActiveX Remote Code Execution Vulnerability

  Tags:  endpoint mcafee saas code-execution vulnerability