CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2016-10717
https://notcve.org/view.php?id=CVE-2016-10717
21 Mar 2018 — A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData) to permit execution of unauthorized applications including malware and malicious websites. Files blacklisted by Malwarebytes Malware Protect can be executed, and domains blacklisted by Malwarebytes Web Protect can be reached through HTTP. Una vulnerabilidad... • http://www.securitytube.net/video/16690 • CWE-254: 7PK - Security Features •
CVSS: 9.8EPSS: 18%CPEs: 2EXPL: 4CVE-2014-4936 – Malwarebytes Anti-Malware < 2.0.3 / Anti-Exploit < 1.03.1.1220 - Update Code Execution
https://notcve.org/view.php?id=CVE-2014-4936
16 Dec 2014 — The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable. La funcionalidad de actualización en el consumidor Malwarebytes Anti-Malware (MBAM) anterior a 2.0.3 y el consumidor Malwarebytes Anti-Exploit (MBAE) 1.04.1.1012 y anteriores permiten a atacantes man-in-the-middle ejecutar código arbitrari... • https://packetstorm.news/files/id/130244 • CWE-345: Insufficient Verification of Data Authenticity •