CVE-2015-3326

Trend Micro ScanMail for Microsoft Exchange SMEX 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force...

Authentication flaw

Trend Micro ScanMail for Microsoft Exchange SMEX 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force...

CVE-2015-3326

Trend Micro ScanMail for Microsoft Exchange (SMEX) versions affected: 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180. The vulnerability stems from generating session IDs for the web console with a predictable random number generator, enabling remote attackers to attempt brute‑f...

CVE-2015-3326

Trend Micro ScanMail for Microsoft Exchange SMEX 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

Coordinated Takedown Puts End to Simda Botnet

The Simda botnet, known for spreading banking malware and dropping a backdoor on hundreds of thousands of machines worldwide, was taken down last Thursday in a collaborative effort between international law enforcement bodies and private security and technology companies. Fourteen command and...

Trend Micro Interscan Messaging Security Virtual Appliance (IMSVA) Detection (SSH Login)

SSH login-based detection of Trend Micro Interscan Messaging Security Virtual Appliance IMSVA. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ...

Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Interscan Web Security Virtual Appliance Detection (SSH Login)

SSH login-based detection of Trend Micro Interscan Web Security Virtual Appliance IWSVA. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

Trend Micro InterScan Web Security Virtual Appliance Device Detection

Binary data trendmicroiwsvaversion.nbin...

Trend Micro IWSVA < 6.0 Build 1244 Information Disclosure

The remote host is running a version of Trend Micro InterScan Web Security Virtual Appliance prior to 6.0 Build 1244. It is, therefore, affected by an information disclosure vulnerability due to improper validation of user-supplied configuration input when saving filters in the AdminUI. An...

Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20150305)

It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macro...

Adobe Flash Player - Arbitrary Code Execution

Adobe Flash Player - Arbitrary Code Execution Source: https://github.com/SecurityObscurity/cve-2015-0313 PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/36491.zip Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference:...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

FLASH, CVE-2 0 1 5-0 3 1 3 분석(analysis)-vulnerability warning-the black bar safety net

This year 2 Month 2 day,Trend Micro found the Flash 1dayCVE-2 0 1 5-0 3 1 3 A. This with the earlier analysis of the cve - 2 0 1 5 – 0 3 1 1 vulnerability are equally UAF types. By domainMemory referenced memory will be freed,so that by the Read-Write memory to execute arbitrary instructions. The...

Failover of replica using Re-IP causes Windows crash (the “blue screen” error) on the Veeam Backup server.

Challenge During the failover of a replica that was configured to use Re-IP, a Windows "blue screen" error occurs on the Veeam Backup Server. Cause When performing the Re-IP process the Veeam Backup & Replication software mounts the replica's VMDK using VDK to modify registry entries within the...

Surebackup with the Domain Controller role enabled causes Windows crash (the “blue screen” error) on the Veeam Backup server.

Challenge During a SureBackup or SureReplica job that processes a VM that has been configured to use the Domain Controller role, a Windows "blue screen" error occurs on the Veeam Backup Server. Cause Veeam Backup & Replication software mounts the VM's VMDK using VDK which can cause some anti-viru...

Indexing the Dark Web One Hacking Forum At A Time

CANCUN–There are only so many ways to tip-toe around some of the Internet’s darker, seedier corners. Sites offering illegal drugs, DDoS for hire and other questionable merchandise are often laden with malware, hazardous to visit, and in turn, can be hard to fully get a grip on. But according to...

APT Groups Emerging in Middle East

CANCUN–Since security researchers and vendors began exposing the inner workings of APT groups a few years ago, virtually all of the operations that have been made public have been the work of attackers in Europe, Asia or North America. But recently, groups in the Middle East have joined the game ...