126 matches found
countermeasures.trendmicro.eu XSS vulnerability
Open Bug Bounty ID: OBB-152240 Description| Value ---|--- Affected Website:| countermeasures.trendmicro.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Remote Desktop Services - Web Proxy IE Sandbox Escape (MS15-004) (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape', 'Description' = %q This module abuses a process creation...
Trend Micro ServerProtect 5.58 SpntSvc.EXE Remote Stack Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23868/info Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...
Softek MailMarshal 4,Trend Micro ScanMail 1.0 SMTP Attachment Protection Bypass
No description provided by source. source: http://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneous characters in the filename extension of a...
TrendMicro Control Manger <= 5.5 CmdProcessor.exe - Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Notepad++ Plugin Notepad 1.5 - Local Overflow
Notepad++ Plugin Notepad 1.5 - Local Overflow Exploit Title: Notepad++ - Notepad plugin local exploit Google Dork: Date: 2013-12-01 Exploit Author: Sun Junwen Vendor Homepage: http://notepad-plus-plus.org/ Software Link: http://notepad-plus-plus.org/download/ Version: Notepad ++ 6.3.2 with Notepa...
Phishing Campaign Using Military, Illicit Attachments
Look out for email attachments offering better sex tips and news about newly developed Chinese stealth frigates, because they are loaded with malware, according to a Securelist report written by Kaspersky Lab expert, Ben Godwood. The malware is fairly old and not particularly advanced, but a lot ...
Hacker uses Evernote account as Command-and-Control Server
Cyber criminals are using popular note-taking app Evernote as Command-and-Control Server to give commands to the malware installed on infected PCs using botnets. TrendMicro uncovered a malware detected as “BKDRVERNOT.A” tried to communicate with Command-and-Control Server using Evernote. Malware...
Cybercriminals Use Evernote as C&C
At least one group of cybercriminals has taken to Evernote, the popular cloud-based note-taking and data-sharing service, as a base of operations for a data stealing Trojan, according to TrendMicro threat response engineer Nikko Tamana. TrendMicro detected the threat as “BKDRVERNOT.A” and observe...
PASSTEAL Malware Lurking on File Sharing Sites
Variants of the PASSTEAL malware are propagating by masquerading as key generators for paid applications, popular e-books, and other software on file sharing services, according Alvin John Nieto, a threat response engineer at TrendMicro’s TrendLabs. PASSTEAL, as its name suggests, is a piece of...
TrendMicro Control Manger <= v5.5 CmdProcessor.exe Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
TrendMicro Control Manger <= v5.5 CmdProcessor.exe Stack BOF
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
TrendMicro Control Manger CmdProcessor.exe Stack Buffer Overflow
This module exploits a vulnerability in the CmdProcessor.exe component of Trend Micro Control Manger up to version 5.5. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable function is the CGenericScheduler::AddTask function of...
TrendMicro Control Manager CmdProcessor.exe AddTask Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable functio...
China is the birth place for most of malicious Android apps
China is the birth place for most of malicious Android apps Mobile malware is rising, and there have been explosions in the world of viruses and Trojans. Virus makers are now targeting mobile platforms- thanks to their growing popularity. If we take the statistics from last 6 months, the chances ...
Trendmicro IWSS 3.1 Privilege Escalation
BUGUROO SECURITY ADVISORY ADVISORY Title: Trendmicro IWSS 3.1 privilege escalation Product: InterScan Web Security Suite IWSS Vendor: TrendMicro Advisory ID: BSA-2011-002 Advisory URL: http://buguroo.com/adv/BSA-2011-002.txt Date published: 25/10/2011 DISCLAIMER Buguroo Offensive Security, S.L...
TrendMicro Data Loss Prevention 5.5 Directory Traversal
This module tests whether a directory traversal vulnerability is present in Trend Micro DLP Data Loss Prevention Appliance v5.5 build 'TrendMicro Data Loss Prevention 5.5 Directory Traversal', 'Description' = %q This module tests whether a directory traversal vulnerability is present in Trend Mic...
TrendMicro Control Manager security vulnerabilities
Integer overflow on TCP/20801 request handling. SQL injection...
TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within EnUtility.dll. A module called from CASProcessor.exe running on TCP port...
Trend Micro OfficeScan TMTDI Module Local Privilege Escalation
The remote host is either running Trend Micro OfficeScan or Trend Micro OfficeScan Client. The TMTDI module included with the installed version is affected by an unspecified vulnerability, which could allow a local attacker to execute arbitrary code on the remote system. C Tenable Network Securit...