7247 matches found
Trend Micro Control Manager cgiCMUIDispatcher SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within cgiCMUIDispatcher.exe. The issue lies in the failure to sanitize user-supplied...
Trend Micro Smart Protection Server Exec Remote Code Injection
This module exploits a vulnerability found in TrendMicro Smart Protection Server where untrusted inputs are fed to ServWebExec system command, leading to command injection. Please note: authentication is required to exploit this vulnerability. Module Options msf use...
Trend Micro Internet Security Multiple Vulnerabilities
Trend Micro Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...
Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback — Mozilla
An anonymous security researcher working with Trend Micro's Zero Day Initiative reported a buffer overflow in the ClearKey Content Decryption Module CDM used by the Encrypted Media Extensions EME API. This vulnerability can be triggered using a malformed video file due to incorrect error handling...
Trend Micro Deep Discovery 3.7 / 3.8 SP1 (3.81) / 3.8 SP2 (3.82) - hotfix_upload.cgi Filename Remote
Exploit for linux platform in category web applications Version: TDA 2.6.1062r1 Summary: The hotfixupload.cgi file contains a flaw allowing a user to execute commands under the context of the root user. Details: The hotfixupload.cgi file is used to upload files hot fixes. Below is a sample of the...
Trend Micro Deep Discovery 3.73.8 SP1 (3.81)3.8 SP2 (3.82) - hotfix_upload.cgi Filename Remote Code Execution
Trend Micro Deep Discovery 3.73.8 SP1 3.813.8 SP2 3.82 - hotfixupload.cgi Filename Remote Code Execution Version: TDA 2.6.1062r1 Summary: The hotfixupload.cgi file contains a flaw allowing a user to execute commands under the context of the root user. Details: The hotfixupload.cgi file is used to...
Trend Micro OfficeScan Directory Traversal Vulnerability
Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. Trend Micro OfficeScan fails to adequately filter user-submitted input, allowing yu8ancheng attackers to exploit a vulnerability by submitting directory traversal requests to access arbitrary files containing...
Trend Micro Deep Discovery Inspector RCE Vulnerability
Trend Micro Deep Discovery Inspector is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Trend Micro Deep Discovery Inspector Detection
Detection of Trend Micro Deep Discovery Inspector The script sends a connection request to the server and attempts to detect the presence of Trend Micro Deep Discovery Inspector and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...
CVE-2016-5840
hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...
CVE-2016-5840
hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...
Design/Logic Flaw
hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...
CVE-2016-5840
hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...
CVE-2016-5840
Trend Micro Deep Discovery Inspector (DDI) is affected by a hotfix_upload.cgi vulnerability that lets remote attackers execute arbitrary code via crafted shell metacharacters in the Content-Disposition filename parameter. Affected products/versions include DDI 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3....
Trend Micro Deep Discovery hotfix_upload.cgi Document Name Remote Code Execution Vulnerability
Trend Micro Deep Discovery detects, analyzes, and responds to ransomware, real-time attacks, and more. Trend Micro Deep Discovery has a remote code execution vulnerability in the hotfixupload.cgi implementation, which can be exploited by a remote attacker to execute arbitrary code in the root...
Trend Micro Deep Discovery hotfix_upload.cgi filename Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery. Authentication is required to exploit this vulnerability. The specific flaw exists within hotfixupload.cgi. The vulnerability is caused by the lack of input validation...
CVE-2016-1226
Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...