ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-234 July 11, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Control Manager -...

ZDI-11-235: TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability

ZDI-11-235: TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-235 July 12, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Control Manager --...

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-234 July 11, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Control Manager -...

Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the CasLogDirectInsert.aspx...

Trend Micro Data Loss Prevention Virtual Appliance Web Console Detection

The remote web server hosts an instance of Trend Micro Data Loss Prevention DLP Web Console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55455; scriptversion"1.9";...

Trend Micro Data Loss Prevention Virtual Appliance Encoded Traversal Arbitrary File Access

The instance of Trend Micro Data Loss Prevention Web Console listening on this port allows an unauthenticated, remote attacker to retrieve arbitrary files through its web server using specially crafted requests with encoded directory traversal sequences. This can result in the disclosure of...

Trend Micro Data Loss Prevention Detection

This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. OpenVAS Vulnerability Test $Id: gbtrendmicrodatalosspreventiondetect.nasl 6032 2017-04-26 09:02:50Z teissa $ Trend Micro Data Loss Prevention Detection Authors: Michael Meyer...

Trend Micro Data Loss Prevention Directory Traversal Vulnerability

Trend Micro Data Loss Prevention is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker could exploit this vulnerability using directory- traversal strings such as '../' to gain access to arbitrary files on the targeted...

Trend Micro Data Loss Prevention Detection

This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Data Loss Prevention 5.5 Directory Traversal Vulnerability

Trend Micro Data Loss Prevention is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA-...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date: 27/05/2011 Remote: Yes Author Site Email:...

Microsoft Patches Hotmail Security Vulnerability !

Microsoft recently patched a Hotmail security flaw that enabled attackers to access a user's e-mails and contacts. "The vulnerability was actively being exploited using emails that contained malicious scripts, Trend Micro researcher Karl Dominguez said Monday," writesThe Register's Dan Goodin...

CVE-2011-1327

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

Code injection

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

CVE-2011-1327

The vulnerability CVE-2011-1327 affects Trend Micro Internet Security 2009 (Virus Buster 2009 / PC-cillin 2009). The key input encryption function does not completely encrypt passwords, allowing local users with access to the system to potentially obtain sensitive information via a keylogger. The...

CVE-2011-1327

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

Rajasthan State marketing site infected with malicious code

India's Rajasthan State Co-operative Marketing Federation Ltd https://rajfed.gov.in/ has been infected with a malicious script tag. This government site promotes the objectives of procuring agricultural produce from farmers through the member societies on support prices declared by the Govt. of...

Popular Sports Site Goal.com Serves Malware

Goal.com, a popular football aka “soccer” for all us Yanks news site was hacked and found serving malware via drive-by-downloads between April 27 and 28, according to a post by Web security firm Armorize. In an analysis of the attack, Armorize researcher Wayne Huang suggests that a hacker...

Belnet Security Conference, 5 May 2011 in Brussels !

Belnet Security Conference, 5 May 2011 in Brussels ! Security on the Internet is one of Belnet's highest priorities. Belnet after all has extensive expertise at its disposal in the area of Internet security. Moreover, with the expansion of its security services, Belnet wishes to raise awareness o...