ZDI-24-077: Trend Micro Apex Central Unrestricted File Upload Vulnerability | allinfosecnews.com

Jan. 19, 2024, 6 a.m. |

ZDI: Published Advisories www.zerodayinitiative.com

This vulnerability allows remote attackers to create arbitrary files on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2023-52324.

apex apex central arbitrary files attackers authentication cve cves cvss exploit file files file upload micro rating trend trend micro upload vulnerability zdi

More from www.zerodayinitiative.com / ZDI: Published Advisories

ZDI-24-407: X.Org Server ProcRenderAddGlyphs Use-After-Free Local Privilege Escalation Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code cve +23

ZDI-24-406: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

adobe adobe after effects aep after effects +18

ZDI-24-405: Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

arbitrary code attackers authentication authorization +20

ZDI-24-415: (Pwn2Own) Oracle VirtualBox E1000 Uninitialized Memory Information Disclosure Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-414: (Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code controller +22

ZDI-24-413: (Pwn2Own) Oracle VirtualBox DevVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-412: (Pwn2Own) Oracle VirtualBox VirtIOCore Buffer Overflow Local Privilege Escalation Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers buffer buffer overflow +23

ZDI-24-411: (Pwn2Own) Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-410: Oracle VirtualBox vboxdrv Improper Privilege Management Local Privilege Escalation Vulnerability 2 days, 12 hours ago | www.zerodayinitiative.com

attacker attackers code cves +21

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Lead Technical Product Manager - Threat Protection

@ Mastercard | Remote - United Kingdom

View on infosec-jobs.com

Data Privacy Officer

@ Banco Popular | San Juan, PR

View on infosec-jobs.com

GRC Security Program Manager

@ Meta | Bellevue, WA | Menlo Park, CA | Washington, DC | New York City

View on infosec-jobs.com

Cyber Security Engineer

@ ASSYSTEM | Warrington, United Kingdom

View on infosec-jobs.com

Privacy Engineer, Technical Audit

@ Meta | Menlo Park, CA

View on infosec-jobs.com