8615 matches found
Location-Based Services Raise Privacy, Security Risks
The growing popularity of location-based services in the social networking world is a serious security and privacy risk that must be taken seriously. These services, which allow users to share their whereabouts with other people by disclosing their own location, is a very popular trend on social...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution
This module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX. When sending an invalid pointer to the extSetOwner function of UfPBCtrl.dll an attacker may be able to execute arbitrary code. Module Options msf use...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Internet Security Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
Interscan Web Security 5.0 - Persistent Cross-Site Scripting
Interscan Web Security 5.0 - Persistent Cross-Site Scripting Exploit Title: Permanent XSS in InterScan Web Security Virtual Appliance 5.0 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU&langloc=1 Version: 5.0 Tested on: Red Hat Nash...
InterScan Web Security Virtual Appliance本地权限提升和任意文件上传/下载漏洞
BUGTRAQ ID: 41072 InterScan Web Security Virtual Appliance是一款能安装在VMware平台上的网页过滤产品。 InterScan Web Security Virtual Appliance没有正确地过滤提交给/servlet/com.trend.iwss.gui.servlet.exportreport的 exportname"参数和提交给/servlet/com.trend.iwss.gui.servlet.ConfigBackup的 pkgname参数，远程攻击者可以通过目录遍历攻击从系统下载任意文件。 InterScan W...
Wing FTP Server PORT Command DoS Vulnerability
Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU?loc=1 Version: 5.0 Tested on: Red Hat Nash 5.1 Vulnerability Description: The...
Trend Micro Interscan Web Security Virtual Appliance - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/41072/info Trend Micro InterScan Web Security Virtual Appliance is prone to multiple vulnerabilities. Exploiting these issues can allow an attacker to download or upload arbitrary files to the system. This may aid in further attacks. Firmware versions pri...
Trend Micro OfficeScan - Remote Stack Buffer Overflow (Metasploit)
$Id: trendmicroofficescan.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Trend Micro OfficeScan - Client ActiveX Control Buffer Overflow (Metasploit)
$Id: trendmicroofficescan.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Trend Micro ServerProtect 5.58 - Remote Buffer Overflow (Metasploit)
$Id: trendmicroserverprotect.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)
$Id: trendmicroserverprotectcreatebinding.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)
$Id: trendmicroserverprotectearthagent.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Koobface Worm Doubles C&C Servers in 48 Hours
Yesterday’s shut down of Troyak-as was definitely good news for the whole IT security community. Seeing cybercriminals getting kicked out from the Internet and then trying to get back inside calls for popcorn and soda. But unfortunately, as some botnets struggle, others stay unaffected: Koobface,...
Trend Micro Products AntiVirus Library Buffer Overflow (CVE-2005-0533)
TrendMicro provides several anti-virus AV scanning products for home use as well as gateway AV scanners. The AV scanner product line has the ability to decode several archived file formats when scanning file contents for viruses. All scanner products are based on scanning engines implemented as...
Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)
Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...
Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability
Trend Micro OfficeScan is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability
This host has Trend Micro OfficeScan running which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanurlfiltbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability Authors: Veerendra ...
Buffer overflow
Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...
CVE-2010-0564
Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...