CVE-2017-6398

An issue was discovered in Trend Micro InterScan Messaging Security Virtual Appliance 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user which is root. Besides, the default installation of IMSVA comes with default administrator credentials. The...

Trend Micro InterScan Messaging Security Remote Code Execution Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A remote command execution vulnerability exists in Trend Micro InterScan Messaging Security. It allows remote attackers to run arbitrary commands with root privileges...

Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution

This module exploits a command injection vulnerability in the Trend Micro IMSVA product. An authenticated user can execute a terminal command under the context of the web server user which is root. Besides, default installation of IMSVA comes with a default administrator credentials. saveCert.ims...

Trend Micro Local Elevation of Privilege Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSA is an email gateway security appliance from Trend Micro that integrates anti-virus, anti-spyware and anti-phishing technologies to provide comprehensive protection for email applications. A local elevation of privilege vulnerability...

Multiple Vulnerabilities in Trend Micro InterScan Messaging Security

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security has multiple vulnerabilities. The vulnerabilities can be exploited by an attacker to execute arbitrary script code on a trusted user's browser in the context of an affected...

Trend Micro InterScan Messaging Security Cross-Site Scripting Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A cross-site scripting vulnerability exists in Trend Micro InterScan Messaging Security. An attacker could exploit the vulnerability to execute arbitrary script code on a trusted user's browser in the context of an...

Trend Micro InterScan Messaging Security Open Redirect Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security suffers from an open redirection vulnerability. The vulnerability allows an attacker to be redirected to an attacker-controlled website...

Insufficiently random session id in Java SockJS client

Session id generation in the Java SockJS client is not sufficiently secure and could allow a user to send messages to another user’s session. Note that this only affects users of the Java SockJS client, which generates its own session id. It does not affect browser clients even if they’re...

Research Shows Increase in Internet Filtering and Usage of FireChat App in Iraq

Researchers at Citizen Lab have taken a close look at the extent of Internet filtering in Iraq, as well as the security of a popular offline chat app used there, and found an increase in the number of services blocked by the government and identified serious privacy and security problems with the...

Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF

No description provided by source...

CVE-2014-3922

Cross-site scripting XSS vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss...

CVE-2014-3922

CVE-2014-3922 is an XSS vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516. The flaw allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss. According to the NVD entry, the CVS...

F-Secure Messaging Security Gateway 'new'参数跨站脚本漏洞

Bugtraq ID:66959 CVE ID:CVE-2014-2844 F-Secure Messaging Security Gateway是一款消息安全网关解决方案。 F-Secure Messaging Security Gateway存在一个反射型跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 F-Secure Messaging Security Gateway 7.5.0 F-Secure Messaging Security Gateway 7.5.0 Patch...

F-Secure Messaging Security Gateway 7.5.0.892 Cross Site Scripting

F-Secure Messaging Security Gateway version 7.5.0.892 suffers from a reflective cross site scripting vulnerability. I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities F-Secure Messaging Security Gateway V7.5.0.892 II. BACKGROUND ------------------------- F-Secure...

Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)

A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-BuildWin321394 allow remote attackers to inject arbitrary web script or HTML via 1 the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or 2 the src parameter to initUpdSchPage.imss...

CVE-2012-2996

CVE-2012-2996 affects Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394. The vulnerability is a Cross-Site Request Forgery (CSRF) in saveAccountSubTab.imss that enables exploitation via a saveAuth action to hijack administrator authentication and create new admin accounts. Root ...

CVE-2012-2995

Multiple cross-site scripting XSS vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-BuildWin321394 allow remote attackers to inject arbitrary web script or HTML via 1 the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or 2 the src parameter to initUpdSchPage.imss...

Trend Micro InterScan Messaging Security Suite XSS / CSRF

Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com Software Link: http://www.trendmicro.com/ftp/products/interscan/IMSSv7.1Win1394.zip Version:...

Trend Micro InterScan Messaging Security Suite XSS / CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com Software Link:...