Information disclosure

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto thei...

CVE-2016-9314

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto thei...

CVE-2016-9314

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto thei...

Cross site scripting

Multiple stored Cross-Site-Scripting XSS vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allow authenticated, remote users with least privileges to inject arbitrary...

CVE-2016-9315

Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or ad...

CVE-2016-9269

CVE-2016-9269 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5.x before Build 1737. The vulnerability lies in the ManagePatches servlet (com.trend.iwss.gui.servlet.ManagePatches) where insecure access controls during patch updates allow an authenticated, remote user with l...

CVE-2016-9315

Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or ad...

Joomla! Component J-HotelPortal 6.0.2 - 'review_id' SQL Injection

Exploit Title: Joomla! Component J-HotelPortal v6.0.2 - SQL Injection Google Dork: inurl:index.php?option=comjhotelreservation Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy: http://www.cmsjunkie.com/joomla-hotel-portal Demo: http://hoteldemo.cmsjunkie.com/j3/portal/...

Joomla! Component Eventix Events Calendar 1.0 - SQL Injection

Joomla! Component Eventix Events Calendar 1.0 - SQL Injection Exploit Title: Joomla! Component Eventix Events Calendar v1.0 - SQL Injection Google Dork: inurl:index.php?option=comeventix Date: 21.02.2017 Vendor Homepage: http://informafix.fr/ Software Buy:...

Trend Micro InterScan Arbitrary File Write Vulnerability

Trend Micro InterScan Web Security Virtual Appliance is a Trend Micro Web Security Gateway that provides plug-and-play protection against Web threats. An arbitrary file write vulnerability exists in Trend Micro InterScan that can be exploited by an attacker to gain privileges...

CVE-2017-2359

Safari 10.0.3 (Apple) fixes CVE-2017-2359 and related WebKit issues present in Safari

Threat Outbreak Alert RuleID27868: Email Messages Distributing Malicious Software on February 17, 2017

Medium Alert ID: 52682 First Published: 2017 February 18 02:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27868 may contain the following files: Name |...

Joomla! Component EShop 2.5.1 - id SQL Injection

Joomla! Component EShop 2.5.1 - id SQL Injection Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comeshop Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla! Component OS Property 3.0.8 - SQL Injection

Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/os-property-joomla-real-estate.html Demo:...

Joomla! Component Joomloc-Lite 1.3.2 - 'site_id' SQL Injection

Exploit Title: Joomla! Component Joomloc-Lite v1.3.2 - SQL Injection Google Dork: inurl:index.php?option=comjoomloc Date: 18.02.2017 Vendor Homepage: http://www.joomloc.fr.nf/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/joomloc-lite/...

Threat Outbreak Alert RuleID27872: Email Messages Distributing Malicious Software on February 17, 2017

Medium Alert ID: 52677 First Published: 2017 February 17 13:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27872 may contain the following files: Name |...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliance WSA are both products of Cisco, Inc. and are a set of network security appliances.Cisco AsyncOS is a set of operating systems used in these products. A remote security bypass vulnerability exists in Cisco AsyncOS for Email and Web Security...

Trend Micro InterScan Web Security Virtual Appliance Remote Code Execution Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A remote command execution vulnerability exists in Trend Micro IWSVA version 6.5. The...

Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A sensitive information disclosure vulnerability exists in Trend Micro IWSVA version 6.5...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. The vulnerability can be...