CVE-2021-25242: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...

Trend Micro Apex One and OfficeScan XG SP have information leakage vulnerabilities

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

Multiple Trend Micro information leakage vulnerabilities

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

CVE-2021-25236: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep...

SUSE-SU-2021:0290-1 Test update for SLE-Micro

This is a test update for the SLE-Micro product...

Metasploit Wrap-Up

MobileIron MDM Hessian-Based Java Deserialization RCE Our very own wvu-r7 has added exploits/linux/http/mobileironmdmhessianrce, which exploits an ACL bypass in MobileIron MDM products to execute a Java deserialization attack using a Groovy gadget against a Hessian based endpoint. CVE-2020-15505...

PT-2021-16486

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds read information disclosure issue could allow an attacker to disclose sensitive information abou...

PT-2021-16487

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions not specified OfficeScan XG SP1 version not specified Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds write information disclosure issue could allow a local attacker to...

PT-2021-16484

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security affected versions no...

PT-2021-16477

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem version not specified OfficeScan XG version SP1 Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about x86 agent...

Trend Micro Apex One security vulnerabilities

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

PT-2021-16481

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain patch level information. Recommendations: For Trend Micr...

PT-2021-16474

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a...

PT-2021-16479

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One version 10.0 SP1 Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a sweep. This iss...

PT-2021-16478

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain x64 agen...

PT-2021-16480

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated user to obtain version and build...

PT-2021-16475

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem affected versions not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the managing port used by agents. There is no information provided abou...

PT-2021-16471

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific configuration download file...

PT-2021-16465

Name of the Vulnerable Software and Affected Versions: Trend Micro Antivirus for Mac 2021 Consumer Description: The issue is a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. An attacker must first obtain the ability to execute...

PT-2021-16466

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated...