The vulnerability of the Trend Micro Deep Security Agent anti-virus protection system in Windows operating systems arises from the failure to take measures to neutralize certain special elements. This vulnerability allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Trend Micro Deep Security Agent anti-virus protection software for Windows operating systems is related to the lack of measures taken to neutralize its special elements. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitra...

Trend Micro Apex One Multiple Vulnerabilities (KA-0016669)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12980 and Agent Build 12980. It is, therefore, affected by multiple vulnerabilities, including the following: - An origin validation vulnerability in the...

Malicious code in jigasi-haproxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84edbe7b5074454dc19154e38a0b4aaebad52cb446488862a52aa8e62db2b53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, local-static-provisioner, nodetaint, k8s-device-plugin, kubernetes-dns-node-cache, ip-masq-agent, argocd-image-updater...

Metasploit Weekly Wrap-Up 11/22/2024

JetBrains TeamCity Login Scanner Metasploit added a login scanner for the TeamCity application to enable users to check for weak credentials. TeamCity has been the subject of multiple ETR vulnerabilities and is a valuable target for attackers. Targeted DCSync added to Windows Secrets Dump This...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, local-static-provisioner, nodetaint, k8s-device-plugin, kubernetes-dns-node-cache, ip-masq-agent, argocd-image-updater...

Ivanti EPM Agent Portal Command Execution Exploit

This Metasploit module leverages an unauthenticated remote command execution vulnerability in Ivanti's EPM Agent Portal where an RPC client can invoke a method which will run an attacker-specified string on the remote target as NT AUTHORITY\SYSTEM. This vulnerability is present in versions prior ...

Ivanti EPM Agent Portal Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/msnrtp/client' class MetasploitModule 'Ivanti EPM Agent Portal Command Execution', 'Description' = %q This module leverages an unauthenticated RCE in...

GHSA-J5HQ-5JCR-XWX7 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher...

CVE-2024-52280 vulnerabilities

Vulnerabilities for packages: rancher-agent...

CVE-2024-52280 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher...

GHSA-J5HQ-5JCR-XWX7 vulnerabilities

Vulnerabilities for packages: rancher-agent...

Vulnerability fixed in Trend Micro Deep Security

Trend Micro has fixed a vulnerability in Trend Micro Deep Security. The vulnerability is in the Trend Micro Deep Security 20 Agent and allows malicious actors with legitimate domain access to elevate privileges and potentially execute arbitrary code. Trend Micro has released updates to fix the...

CVE-2024-51503

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to...

CVE-2024-51503

Summary: CVE-2024-51503 affects Trend Micro Deep Security Agent 20 (manual scan command injection). The vulnerability exists in the agent’s Notifier component and, under certain conditions, allows an attacker with legitimate domain access to escalate privileges and execute arbitrary code on remot...

Trend Micro Deep Security Agent Local Privilege Escalation (KA-0016724)

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Note that Nessus has not tested for this issue but has instead relied solely on the application's self-reported version...

Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs

Summary Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition in IBM License Key Server Administration and Reporting Tool ART and Administration Agent. For more information please refer to Oracle's CPU Advisory and the X-Force database entries referenced below. Vulnerability Details...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty impacts IBM Common Licensing

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. CVE-2023-50314 Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofin...

CVE-2024-52926

Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent...

CVE-2024-52926

The CVE-2024-52926 entry concerns Delinea Privilege Manager prior to 12.0.2, where the Windows agent security is mishandled. Affected product: Delinea Privilege Manager (Windows agent). Root cause: mishandling of security by the Windows agent (no specific internal component provided). Impact: CVS...