7528 matches found
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 5, 2017
This week marked the first time an airline misplaced my bags for a significant period of time. Inclement weather forced me to not only change my flight, but also change airlines. Unfortunately, my luggage didn’t get the memo. I dealt with two airlines to find my bags, and I eventually received my...
Bridging the Skills Gap with Trend Micro’s Capture the Flag (CTF) Competition
We all know the IT security industry is suffering from chronic skills gaps and shortages around the world. In the US things are no different, with an estimated talent shortfall of around 40,000 jobs for information security analyst roles alone. While various initiatives have been proposed, few ha...
Trend Micro SafeSync for Enterprise (SSFE) Detection
Binary data trendmicrossfedetect.nbin...
Trend Micro SafeSync for Enterprise Authentication Bypass
The Trend Micro SafeSync for Enterprise SSFE application running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a series of HTTP PUT requests using specially crafted parameters, to disclose the valid, unexpired...
Trend Micro Control Manager XML External Entity Processing
An XML external entity processing vulnerability exists in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query. A remote, authenticated attacker could exploit this vulnerability by sending a malicious HTTP request to th...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 29, 2017
“Anything that can go wrong will go wrong.” It’s not exactly clear how Murphy’s Law originated, but it seems to always make an appearance at the one time you can’t afford for anything to go wrong. Your laptop starts to malfunction right as you need to finish a project this happened to yours truly...
Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing
An XML external entity XXE processing vulnerability exist in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query in ProductTreeRightWindow.aspx. A remote, authenticated attacker could exploit this vulnerability by...
Trend Micro InterScan Web Security Virtual Appliance 6.5 Multiple Vulnerabilities
Trend Micro has released a new hot fix for Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5. This build resolves multiple vulnerabilities related to potential remote code execution RCE. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...
Decade Long Partnership = Global Partner Innovation Award
Here at Trend Micro we highly value the relationships we’ve build with our partners, especially those that have spanned several years. However, it’s particularly gratifying when those partners choose to recognize our work with an award. So, excuse us while we toot our own horn’s for a bit...
Trend Micro Deep Security has multiple vulnerabilities
Trend Micro Deep Security is server and application protection software that unifies security across virtual, cloud and traditional data center environments. Trend Micro Deep Security has multiple vulnerabilities. Vulnerabilities can be exploited by attackers to cause arbitrary file disclosure,...
Trend Micro Deep Security 6.5 XXE / Code Execution
The following advisory describes three 3 vulnerabilities found in Trend Micro Deep Security version 6.5. aThe Trend Micro Hybrid Cloud Security solution, powered by XGen security, delivers a blend of crossA-generational threat defense techniques that have been optimized to protect physical,...
Trend Micro Deep Security version 6.5 - XML External Entity Injection / Local Privilege Escalation /
Exploit for multiple platform in category web applications The following advisory describes three 3 vulnerabilities found in Trend Micro Deep Security version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delivers a blend of cross-generational threat defense...
Trend Micro Deep Security 6.5 - XML External Entity Injection Local Privilege Escalation Remote Code Execution
Trend Micro Deep Security 6.5 - XML External Entity Injection Local Privilege Escalation Remote Code Execution The following advisory describes three 3 vulnerabilities found in Trend Micro Deep Security version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delive...
Trend Micro Deep Security 6.5 - XML External Entity Injection / Local Privilege Escalation / Remote Code Execution
The following advisory describes three 3 vulnerabilities found in Trend Micro Deep Security version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delivers a blend of cross-generational threat defense techniques that have been optimized to protect physical,...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 22, 2017
For those of you who follow the National Football League NFL, do you remember Super Bowl 47? I wasn’t exactly thrilled about the teams that played since I’m not a 49ers or Ravens fan. What was interesting about the game is that it was halted for over half an hour in the third quarter because of a...
CVE-2017-9037
Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...
CVE-2017-9037
Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...
CVE-2017-9036
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory...
