4 - 2017 - :: Deepquest ::

>> Trend Micro Threat Discovery Appliance 2.6.1062r1 admin_sys_time.cgi Remote Code Execution

USER: deepcore // 2017-04-21 // 0 CMT

Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from a admin_sys_time.cgi remote code execution vulnerability.

[EXPLOIT]

>> Trend Micro Threat Discovery Appliance 2.6.1062r1 admin_sys_time.cgi Remote Code Execution

USER: deepcore // 2017-04-21 // 0 CMT

Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from an admin_sys_time.cgi remote code execution vulnerability.

[EXPLOIT]

>> Trend Micro Threat Discovery Appliance 2.6.1062r1 logoff.cgi Directory Traversal

USER: deepcore // 2017-04-21 // 0 CMT

Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from a logoff.cgi directory traversal authentication bypass vulnerability.

[EXPLOIT]

>> Trend Micro Threat Discovery Appliance 2.6.1062r1 dlp_policy_upload.cgi Information Disclosure

USER: deepcore // 2017-04-21 // 0 CMT

Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from a dlp_policy_upload.cgi information disclosure vulnerability.

[EXPLOIT]

>> Trend Micro Threat Discovery Appliance 2.6.1062r1 Session Generation Authentication Bypass

USER: deepcore // 2017-04-21 // 0 CMT

Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from a session generation authentication bypass vulnerability.

[EXPLOIT]

>> VirtualBox 5.0.32 Windows Process COM Injection Privilege Escalation

USER: deepcore // 2017-04-21 // 0 CMT

The process hardening implemented by the VirtualBox driver can be circumvented to load arbitrary code inside a VirtualBox process giving access to the VBoxDrv driver which can allow routes to…