13091 matches found
CVE-2021-22504
CVE-2021-22504 affects Micro Focus Operations Bridge Manager (OBM) software, covering versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, and 2020.10. The Red Hat/NVD records describe arbitrary remote code execution as the impact, with no explicit root-cause details provided in th...
How to use Rancher in Kubernetes
Author Chuck Losh sets up a test deployment of Rancher to "reign in" his local test Docker-Desktop Kubernetes cluster, then sets up a private helm catalog to deploy Trend Micro Cloud One Container Security components...
CVE-2021-22504: Undefined Security Weakness
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server...
Micro Focus Operations Bridge Manager Security Vulnerability
Micro Focus Operations Bridge Manager is a software application from Micro Focus UK. It provides a monitoring function. A security vulnerability exists in the Micro Focus Operations Bridge Manager product that allows arbitrary code execution and affects the following products and versions: 10.1x,...
PT-2021-15110
Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge Manager versions 10.1x through 10.6x, 2018.05 through 2020.10 Description The issue is an arbitrary code execution vulnerability that could allow remote attackers to execute arbitrary code on an OBM server. This...
Micro Focus Operations Bridge Manager Remote Code Execution Exploit
This Metasploit module exploits an authenticated Java deserialization that affects a truckload of Micro Focus products: Operations Bridge Manager, Application Performance Management, Data Center Automation, Universal CMDB, Hybrid Cloud Management and Service Management Automation. However, this...
CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
Code injection
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
CVE-2021-25251
CVE-2021-25251 affects Trend Micro Security (Consumer) 2020 and 2021 families. The vulnerability is a code injection flaw (CWE-94) that could allow an attacker with administrative privileges to execute arbitrary code and disable the program’s password protection and protection. The impact is desc...
CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
CVE-2021-25251: Improper Control of Generation of Code
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit...
PT-2021-16488
Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2020 through 2021 Description: The issue allows an attacker to disable the program's password protection and disable protection through a code injection vulnerability. An attacker must already have administrator...
Micro Focus Operations Bridge Manager Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Micro Focus Operations Bridge Manager Authenticated Remote Code Execution', 'Description' = %q This module exploits an authenticated Java...
Trend Micro Security 2020 Code Injection Vulnerability
A code injection vulnerability exists in Trend Micro Security that originates from a network system or product that does not properly filter specific elements of externally entered data during the construction of a code segment. An attacker could exploit the vulnerability to generate an illegal...
Micro Focus Operations Bridge Reporter Unauthenticated Command Injection
This module exploits a command injection vulnerability on login yes, you read that right that affects Micro Focus Operations Bridge Reporter on Linux, versions 10.40 and below. It's a straight up command injection, with little escaping required and it works before authentication. This module has...
Micro Focus Operations Bridge Reporter Remote Code Execution Vulnerability
Micro Focus Operations Bridge Reporter OBR is an IT reporting software that provides resource, event, and response time reports across server, network, and application environments. A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40. An attacker...
Micro Focus Operations Bridge Reporter userName Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the userName parameter provided to the...