982 matches found
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 20, 2017
It’s that time of year again, when many will gather with their families, eat way too much, and catch those crazy Black Friday sales. I’ve been seeing “Black Friday” sales for almost two weeks now. Cyber Monday, which falls on the Monday after the U.S. Thanksgiving holiday, is probably going to be...
IT threat evolution Q3 2017. Statistics
Q3 figures According to KSN data, Kaspersky Lab solutions detected and repelled 277,646,376 malicious attacks from online resources located in 185 countries all over the world. 72,012,219 unique URLs were recognized as malicious by web antivirus components. Attempted infections by malware that ai...
More trouble in Google Play land
This is not a good week for Google, it seems. After our mobile security experts repeatedly discovered adware on several apps on the Google Play store, our friends at Symantec have unearthed at least eight malicious apps that are found capable of adding affected mobile devices to a botnet. Accordi...
Trend Micro Mobile Security for Enterprise SQL Injection
SQL injection vulnerability in Trend Micro Mobile Security for Enterprise assignpolicy action Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Today’s Predictions for Tomorrow’s Internet
October is National Cybersecurity Awareness Month, an annual campaign to raise awareness about cybersecurity. Smart cities, connected devices, digitized records, as well as smart cars and homes, have become a new reality. While there are tremendous benefits to this technology, it is critical to...
Google Android Qualcomm Crypto Driver Elevation of Privilege Vulnerability (CNVD-2017-31136)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm encryption driver, which can be exploited by an attacker to elevate privileges...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Trend Micro Mobile Security Enterprise eas_agent_unregister slink_id SQL Injection (CVE-2017-14078)
An SQL injection vulnerability exists in Trend Micro Mobile Security Enterprise. The vulnerability is due to insufficient validation of the slinkid request parameter with easagentunregister action. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to...
Trend Micro Mobile Security Command Injection Vulnerability
Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. A command injection vulnerability exists in versions of Trend Micro...
Trend Micro Mobile Security Arbitrary File Upload Vulnerability
Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro, Inc. that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. An arbitrary file upload vulnerability exists in versions of...
Trend Micro Mobile Security SQL Injection Vulnerability
Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. A SQL injection vulnerability exists in versions of Trend Micro Mobi...
Trend Micro Mobile Security Authentication Bypass Vulnerability
Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. An authentication bypass vulnerability exists in versions of Trend...
CVE-2017-14079
Unrestricted file uploads in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
CVE-2017-14081
Proxy command injection vulnerabilities in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
Unrestricted file upload
Unrestricted file uploads in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
CVE-2017-14079
Unrestricted file uploads in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
Sql injection
SQL Injection vulnerabilities in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
Command injection
Proxy command injection vulnerabilities in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...
Authentication flaw
Authentication bypass vulnerability in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password...