ET EXPLOIT TrendMicro node.js HTTP RCE Exploit Inbound (showSB)

SID: 2022353Rev: 30 views
History
Sourceet/open
CreatedJanuary 13, 2016
UpdatedOctober 8, 2019
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT TrendMicro node.js HTTP RCE Exploit Inbound (showSB)"; flow:from_server,established; file_data; content:"XMLHttpRequest"; nocase; content:"|3a|49155/api/showSB?url="; fast_pattern; reference:url,code.google.com/p/google-security-research/issues/detail?id=693; classtype:attempted-user; sid:2022353; rev:3; metadata:created_at 2016_01_13, confidence Medium, signature_severity Major, updated_at 2019_10_08;)

References

urlcode.google.com/p/google-security-research/issues/detail?id=693

Metadata

created at2016_01_13
confidenceMedium
signature severityMajor
updated at2019_10_08

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!