Samba Spotlight mdssvc RPC Request Type

Description When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the function...

Samba Spotlight mdssvc RPC Request Infinite

Description When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in ...

Taking the Fight to the Cyber-Criminals

Trend Micro and INTERPOL collaborate to create a safer digital world...

Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming Sector

Cybersecurity researchers have unearthed a novel rootkit signed by Microsoft that's engineered to communicate with an actor-controlled attack infrastructure. Trend Micro has attributed the activity cluster to the same actor that was previously identified as behind the FiveSys rootkit, which came ...

Beware of Big Head Ransomware: Spreading Through Fake Windows Updates

A developing piece of ransomware called Big Head is being distributed as part of a malvertising campaign that takes the form of bogus Microsoft Windows updates and Word installers. Big Head was first documented by Fortinet FortiGuard Labs last month, when it discovered multiple variants of the...

Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules

Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...

PT-2023-8406 · Trend Micro · Trend Micro Deep Security +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security version 20.0 Trend Micro Cloud One - Endpoint and Workload Security Agent affected versions not specified Description: An improper access control issue could allow a local attacker to escalate privileges on affected...

GHSA-462X-C3JW-7VR6 Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

Impact An attacker can use this prototype pollution sink to trigger a remote code execution through the MongoDB BSON parser. Patches Prevent prototype pollution in MongoDB database adapter. Workarounds Disable remote code execution through the MongoDB BSON parser. Credits - Discovered by hir0ot...

Unspecified vulnerability in Trend Micro Apex One (CNVD-2023-65415)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One has a security vulnerability that can be exploited by local attackers to obtain sensitive information...

Unspecified vulnerability in Trend Micro Apex One (CNVD-2023-65416)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One has a security vulnerability that can be exploited by a local attacker to elevate privileges...

Trend Micro Apex One Path Traversal Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a path traversal vulnerability, which arises when the program fails to properly filter for specific elements in the path of a resource or file, and can be exploited by an attacker to upload...

Trend Micro Apex One Access Control Error Vulnerability (CNVD-2023-65425)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to obtain sensitive information on an agent...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65424)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by attackers to delete the registry...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65419)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges...

Trend Micro Apex One Access Control Error Vulnerability (CNVD-2023-65422)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to obtain sensitive information on an agent...

Unspecified vulnerability in Trend Micro Apex One (CNVD-2023-65414)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One has a security vulnerability that can be exploited by a local attacker to elevate privileges...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65418)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65417)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges and write arbitrary values to specific entries...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65421)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges and write arbitrary values to an agent subkey...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2023-65420)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges and write arbitrary values to specific entries on an affected installation...