ET EXPLOIT TrendMicro node.js HTTP RCE Exploit Inbound (showSB)

7.0.35.0SID: 2022353Rev: 4Enabled0 views
Sourceet/open
Fileemerging-exploit.rules
CreatedJanuary 13, 2016
UpdatedMarch 14, 2024
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT TrendMicro node.js HTTP RCE Exploit Inbound (showSB)"; flow:established,to_client; file.data; content:"XMLHttpRequest"; nocase; content:"|3a|49155/api/showSB?url="; fast_pattern; reference:url,code.google.com/p/google-security-research/issues/detail?id=693; classtype:attempted-user; sid:2022353; rev:4; metadata:created_at 2016_01_13, confidence Medium, signature_severity Major, updated_at 2024_03_14;)

References

urlcode.google.com/p/google-security-research/issues/detail?id=693

Metadata

created at2016_01_13
confidenceMedium
signature severityMajor
updated at2024_03_14

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!