CVE-2016-7547

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/trendmicrothreatdiscoveryadminsystimecmdi.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

Trend Micro Threat Discovery Appliance <= 2.6.1062r1 dlp_policy_upload.cgi Information Disclosure Vulnerability (CVE-2016-7547)

Example: saturn:trendmicrothreatdiscoverydlppolicyuploadlfd mrme$ ./poc.py + usage: ./poc.py + eg: ./poc.py 172.16.175.123 admin /etc/passwd saturn:trendmicrothreatdiscoverydlppolicyuploadlfd mrme$ ./poc.py 172.16.175.123 admin123 /etc/passwd + logged in... + downloading file...

Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Trend Micro Threat Discovery Appliance adminsystime.cgi Remote Command Execution', 'Description' = %q This module exploits two...

CVE-2016-7547

A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the adminsystime.cgi interface...

CVE-2016-7547

A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the adminsystime.cgi interface...

CVE-2016-7547

CVE-2016-7547 affects Trend Micro Threat Discovery Appliance (TDA) where the admin_sys_time.cgi interface accepts the timezone parameter, enabling remote command execution. Public material in connected sources confirms post-authentication/exploits and Mirroring in Metasploit: Trend Micro Threat D...

Trend Micro Threat Discovery Appliance remote code execution（CVE-2016-7547）

A command injection in the adminsystime. the cgi interface that allows for an attacker to gain remote code execution CVE-2016-7547. Vulnerability linkage: https://www.seebug.org/vuldb/ssvid-92938 This module requires Metasploit: http://metasploit.com/download Current source:...