Categories

  • Announcements regarding the VulnDetect project

    Archived
    12
    Topics
    122
    Posts

    V

    The Privacy Policy has been updated to reflect that data now is stored at Hetzner, rather than at AWS.

    The module that allows custom content like the Privacy Policy has also been reinstalled and reactivated.

    Ping @tom if there are any issues with the forum.

  • Post requests for apps that are missing

    Added App Requests
    324
    Topics
    1.6k
    Posts

    OLLI_SO

    Name of the app:
    FurMark

    Developer:
    Geeks3D

    Website:
    https://www.geeks3d.com/furmark/

    Download Site of the BETA version:

    64-Bit: https://www.geeks3d.com/dl/show/705/UEEYzxyKzVp6ayq 32-Bit: https://www.geeks3d.com/dl/show/708

    Version number displayed in the app:

    2.0.10 (Beta) in the title bar 2.0.10.0 (Beta) in "About"

    2023-09-13_21h09_09.png

    App-Icon
    FurMark_2.0_GUI_Icon.png

    Notes:

    Version 2.0 is Beta but will be released soon Version 2.0 has a new icon I only downloaded the * 64-Bit version There are 2 EXE files: furmark.exe (Command Line Version) FurMark_GUI.exe (GUI Version

    Here the information extracted from furmark.exe:

    File name and path: E:\Benchmark\Furmark\furmark.exe Product Name: FurMark CLI Internal Name: furmark_cli.exe Original Filename: furmark_cli.exe File Description: FurMark CLI Company: Geeks3D Legal Copyright: Copyright (C) 2016-2023 Legal Trademarks: Comments: File Version String: 0.0.0.0 File Version: 0.0.0.0 Product Version String: 0.0.0.0 Product Version: 0.0.0.0

    Here the information extracted from *FurMark_GUI.exe:

    File name and path: E:\Benchmark\Furmark\FurMark_GUI.exe Product Name: FurMark(GUI) Internal Name: FurMark_GUI.exe Original Filename: FurMark_GUI.exe File Description: FurMark(GUI) Company: Geeks3D Legal Copyright: Copyright (C) 2007-2023 Legal Trademarks: Comments: File Version String: 2.0.10.0 File Version: 2.0.10.0 Product Version String: 2.0.10.0 Product Version: 2.0.10.0

  • Post requests for apps that you wish to see updated automatically

    22
    Topics
    35
    Posts

    OLLI_SO

    Please add Keeper Password Manager to the Auto-Patching process, so it is automatically updated (when I select it).
    I post one app in one topic, so we can keep the topics smaller.

    For Keeper Password Manager there is a Choko package available:
    https://community.chocolatey.org/packages/keeper

  • Announcements regarding the VulnDetect project

    31
    Topics
    31
    Posts

    rnzR

    You may be able to use the Custom Software feature to assist you with FortiClient VPN-only.

    Please be mindful when deploying FortiClient over existing installations as there may be conflicts. To find out more about the upgrade paths check the URL below:
    https://docs.fortinet.com/document/forticlient/7.2.0/upgrade-path

    However, there is a number of different ways in which FortiClient can be configured during distribution, thus we can't predict if the approach you decide upon is compatible with the functionality currently provided in Custom Software.

    We did make Proof-of-Concept deployments of Foxit products using MST files.
    https://vulndetect.org/topic/2382/vulndetect-custom-software-upgrading-foxit-phantompdf-to-foxit-pdf-editor

    The documents for FortiClient suggests that it also supports MST files.

    It also suggests that XML files can be used.

    Please see the full docs here:
    https://docs.fortinet.com/document/forticlient/6.0.0/configurator-tool/343622/forticlient-configurator-tool
    https://docs.fortinet.com/document/forticlient/6.0.0/configurator-tool/754658/deploying-forticlient-windows-installation-packages

    Quote: "Starting with FortiClient 5.6.0, an account for the Fortinet Developer Network is required to access the free tool. No license key is required to use the tool."
    This indicates that you need to login to the Fortinet portal to find the latest tool and possibly documentation, the above links refer to 6.0.0, however, FortiClient is currently at 7.2.x.

    We suggest that you configure FortiClient as required, based on the vendors guidelines, and test it using Custom Software.

    If for some reason it fails using Custom Software, but works with local tests, please provide us access to the files you created, and we will test this and help with adjusting any parameters supplied to the installer through Custom Software.

    Note that the files you share with us most likely will contain some sort of credentials and license information. We will naturally delete any sensitive files after testing and documenting our findings.

    You can find the latest installer here:
    https://www.fortinet.com/support/product-downloads#vpn

    A simple Custom Software configuration should look like this:
    f62f260a-cc5e-4067-82ae-13b29edda127-image.png

    Enter a title e.g. "FortiClientVPN"

    Select the installer: FortiClientVPN-7.0.5.0238.msi

    Enter the silent Argument: /qn

    Enter the never restart option Argument: /norestart

    And then click "Save".

    The dialogue will now upload the files to the VulnDetect back-end.

    After saving the Job, you can now select to deploy it to groups or hosts.
    Remember to inspect the host or group, if you want the job to run right away, else it'll apply after the next scheduled inspection.

  • Detection errors and issues should be posted here

    Solved Detection Issues
    400
    Topics
    1.7k
    Posts

    G

    Hi,

    Rufus 4.2 (Build 2074) is reported as older than 4.2 (Build 2070) and not the recommended version.
    1c7ffe63-46b9-4840-b5a3-31f38d991be3-image.png

    Checked on https://rufus.ie/en/: 2074 is the current build.

    Regards.

  • Detection errors and issues should be posted here

    Solved Bundling Issues
    38
    Topics
    122
    Posts

    G

    @Tom & @OLLI_S : fixed
    9b27abf5-15d4-43e5-8954-345b5ac17829-image.png

  • This category will be used to keep track of user contributed suggestions

    Implemented Feature Requests
    139
    Topics
    431
    Posts

    OLLI_SO

    I talked to @Tom about this feature and his answer was, that this feature is not requested by any other customer (therefore it has a lower priority).

    Currently VulnDetect only has a label for "Insecure" applications, for normal updates (that are not security related), there is no separate label available.
    You have to expand each app manually to see available updates.

    I think it would be very useful to see, which apps have updates available.
    Here the mock up I created some years ago:

    1f632d32-d4e6-4ab5-9c78-2d09a4ef6b64-image.png

    @All Users

    If you also think, this feature is useful, please upvote it (by clicking the "^" icon in the first posting in this topic).
    Thank you!

  • This category will be used to keep track of bugs reported by users

    Solved Bugs and Issues
    45
    Topics
    263
    Posts

    OLLI_SO

    In the Configuration the layout of the tab Ignore Rules needs a work over!
    Here two different sizes of the browser window:

    Layout - Ignore Rules - 01.png
    Layout - Ignore Rules - 02.png

  • Feel free to discuss what was good or bad in Secunia PSI and what you expect from VulnDetect

    15
    Topics
    59
    Posts

    T

    Microsoft has issued official fixes for the 0-day CVE-2022-30190 / Follina:
    https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30190

    As expected, Microsoft has classified it as a Windows vulnerability.

    You can see affected systems here:
    https://corporate.vulndetect.com/#/applications/versions?channelTag=microsoft.windows.endrule&status=insecure&title=Microsoft Windows

    Note that it requires a recent inspection, hosts that haven't inspected since 14-06-2022 20:00 CET will not report the missing KB update.