FBI Seizes Domain That Sold Info Stolen in Data Breaches

Enterprise Vulnerabilities
From DHS/US-CERT’s National Vulnerability Database CVE-2019-15625
PUBLISHED: 2020-01-18

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim’s memory processes to extract sensitive information.

CVE-2019-19696
PUBLISHED: 2020-01-18

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishi…

CVE-2019-19697
PUBLISHED: 2020-01-18

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administr…

CVE-2019-20357
PUBLISHED: 2020-01-18

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.

CVE-2020-7222
PUBLISHED: 2020-01-18

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (…

Thanks to the Courtesy of :

https://www.darkreading.com/attacks-breaches/fbi-seizes-domain-that-sold-info-stolen-in-data-breaches/d/d-id/1336833?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Leave a Reply