EUVD-2017-5607

Malware in sbrugna...

EUVD-2018-17998

Malware in sbrugna...

EUVD-2016-7198

Malware in sbrugna...

EUVD-2016-7199

Malware in sbrugna...

EUVD-2017-3022

Malware in sbrugna...

EUVD-2017-3025

Malware in sbrugna...

EUVD-2017-5608

Malware in sbrugna...

Trend Micro Smart Protection Server SQL Injection Vulnerability

Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A SQL injection vulnerability exists in version 3.x of Trend Micro Smart Protection Server Standalone, which originates from a program that fails to properly detect user-submitted strings...

CVE-2018-6237

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...

CVE-2018-10350

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

Remote code execution

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

CVE-2018-10350

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

CVE-2018-6237

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...

CVE-2018-6237

The connected sources confirm a vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x that enables an unauthenticated remote attacker to coerce the product into processing a flood of specially crafted HTTP requests, potentially exhausting the file system and causing a denial of se...

CVE-2018-10350

Summary: CVE-2018-10350 concerns a SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x. The flaw arises from improper handling of parameters passed to wcs_bwlists_handler.php, allowing an attacker to craft input that is used to form SQL querie...

CVE-2018-10350

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

CVE-2018-6237

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...

CVE-2018-10350: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

CVE-2018-6237: Uncontrolled Resource Consumption

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...