CVE-2018-10357

Trend Micro Endpoint Application Control 2.0 contains a directory traversal vulnerability in the FileDrop servlet that can allow a remote attacker to execute arbitrary code. Multiple sources (including ZDI-18-469 and CNVD/NVD variants) describe that authentication is required to exploit, and the ...

CVE-2018-10351

Trend Micro Email Encryption Gateway 5.5 contains a SQL injection in the formRegistration2 class that enables a remote attacker to execute arbitrary SQL statements. Exploitation is possible remotely with network access and requires authentication (though ZDI notes the authentication can be bypass...

CVE-2018-10356

A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability...

CVE-2018-10354

A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer. Authentication is required to exploit this vulnerability...

CVE-2018-10352

The CVE-2018-10352 entry concerns Trend Micro Email Encryption Gateway 5.5, with a vulnerability in the formConfiguration class that enables SQL injection. A remote attacker could execute arbitrary SQL statements on vulnerable installations (authentication required). Multiple connected sources co...

CVE-2018-10353

The CVE-2018-10353 entry concerns Trend Micro Email Encryption Gateway 5.5, where a flaw in the formChangePass class enables a SQL injection information disclosure vulnerability. The vulnerability potentially allows a remote attacker to disclose sensitive information on affected installations. Au...

CVE-2018-10353

A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this vulnerability...

CVE-2018-10354

The CVE-2018-10354 issue affects Trend Micro Email Encryption Gateway 5.5, arising from a flaw in LauncherServer that permits command injection and remote code execution. A remote attacker could run arbitrary code on vulnerable installations; authentication is required to exploit per the primary ...

CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

CVE-2018-10356

CVE-2018-10356 affects Trend Micro Email Encryption Gateway 5.5. A SQL injection vulnerability in the formRequestDomains class can lead to remote code execution. Auth is required to exploit, but at least one connected advisory notes authentication bypass or bypass potential, enabling arbitrary SQ...

Hackers are exploiting a new zero-day flaw in GPON routers

Even after being aware of various active cyber attacks against the GPON Wi-Fi routers, if you haven't yet taken them off the Internet, then be careful—because a new botnet has joined the GPON party, which is exploiting an undisclosed zero-day vulnerability in the wild. Security researchers from...

Protect Your Online Privacy with the New Trend Micro Zero Browser

In the digital age, your personal data and online behavior is increasingly being tracked whenever you browse, search, watch the news, use social networks, purchase goods, or manage your accounts online. Trend Micro, with nearly 30 years of experience in the security industry, is acutely aware of...

This Week in Security News: Hackers and Cyber Attackers

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Chili’s parent company – Brinker International – announced that consumer credit and debit card information had been compromised at some...

A Five-Year Journey: How Trend Micro Helped Bring Down Scan4You

Trend Micro has always had a close relationship with law enforcement around the globe, because we believe that only together can we make the world a safer place in which to exchange digital information. As the business of cybercrime continues to grow and evolve, so must our response. That’s why w...

Trend Micro Endpoint Application Control FileDrop Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Endpoint Application Control. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileDrop servlet. When parsing filenames, the process does no...

Adobe Releases Critical Security Updates for Acrobat, Reader and Photoshop CC

Adobe has just released new versions of its Acrobat DC, Reader and Photoshop CC for Windows and macOS users that patch 48 vulnerabilities in its software. A total of 47 vulnerabilities affect Adobe Acrobat and Reader applications, and one critical remote code execution flaw has been patched in...

Dr. Cleaner Review 2018: Is it the Best Mac Cleanup App?

"Why choose Dr. Cleaner?" This is a common question that many people want to ask as there were too many cleanup apps for the Mac and many don't know which one is the best one or safe to use. However, do not simply believe that there are no viruses or adware found on the macOS. Once you download...

Trend Micro Mobile Security Enterprise eas_agent_sync_client_info slink_id SQL Injection (CVE-2017-14078)

An SQL injection vulnerability exists in Trend Micro Mobile Security Enterprise. The vulnerability is due to insufficient validation of the slinkid request parameter with easagentsyncclientinfo action...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 7, 2018

This week marked National Teacher Appreciation Week here in the United States. I was happy to see that many other countries celebrate educators in all the other months of the year. All of us have at least one teacher, instructor or professor who really made a difference in our lives. There are tw...

Trend Micro Internet Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...