Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)

A remote code execution vulnerability exists in the adminnotification.php script of Trend Micro Smart Protection Server. The vulnerability is due to insufficient validation of user-supplied input. A remote, authenticated attacker could exploit this vulnerability by providing crafted input to the...

Multiple Vulnerabilities in Trend Micro Smart Protection Server

Trend Micro Smart Protection Server is a server that provides smart protection. Trend Micro Smart Protection Server has multiple security vulnerabilities that can be exploited by remote attackers to submit a special request to view arbitrary system files, execute arbitrary code, and gain privileg...

Trend Micro Smart Protection Server Remote Code Execution Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A remote code execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to execute arbitrary code...

Trend Micro Smart Protection Server Directory Traversal Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A directory traversal vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to retrieve arbitrary files in the context of an application on an affected system using a specially...

Trend Micro Smart Protection Server Elevation of Privilege Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. An elevation of privilege vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to gain elevated privileges...

Trend Micro Smart Protection Server Exec Remote Code Injection

This module exploits a vulnerability found in TrendMicro Smart Protection Server where untrusted inputs are fed to ServWebExec system command, leading to command injection. Please note: authentication is required to exploit this vulnerability. This module requires Metasploit:...

Trend WebReputation 10.5 API Circumvention

DCA-2011-0004 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - Trend WebReputation API Vendor Product Description - Secure any endpoint – physical or virtual – with the industry’s strongest, most reliable protection, while reducing the impact on you...