{"vulnerability": "cve-2019-1969", "sightings": [{"uuid": "0ae8bc1e-a809-456f-aeaf-1ff9a9da9c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19690", "type": "seen", "source": "https://t.me/ctinow/208953", "content": "https://ift.tt/Ql2WSxs\nCVE-2019-19690 | Trend Micro Mobile Security up to 10.3.1 on Android weak password", "creation_timestamp": "2024-03-15T17:26:40.000000Z"}, {"uuid": "3c516ae9-8000-4e6f-a7cc-227fb3ebeb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19693", "type": "seen", "source": "https://t.me/ctinow/209438", "content": "https://ift.tt/ehcMtBT\nCVE-2019-19693 | Trend Micro Security 2020 information disclosure", "creation_timestamp": "2024-03-16T09:46:35.000000Z"}, {"uuid": "97e2fab2-fc10-454b-be9a-dc0ae538c939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19692", "type": "seen", "source": "https://t.me/ctinow/209437", "content": "https://ift.tt/jfR2ALq\nCVE-2019-19692 | Trend Micro Apex One 2019 Product Console cross site scripting", "creation_timestamp": "2024-03-16T09:46:34.000000Z"}, {"uuid": "66f6adbc-bea6-4391-8979-a58e495f4441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19691", "type": "seen", "source": "https://t.me/ctinow/209436", "content": "https://ift.tt/I9H6z2G\nCVE-2019-19691 | Trend Micro Apex One/OfficeScan XG Development Tool Credentials insufficiently protected credentials", "creation_timestamp": "2024-03-16T09:46:32.000000Z"}, {"uuid": "912f793b-cca2-45c8-8099-f75f4627a113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19698", "type": "seen", "source": "https://t.me/ctinow/203873", "content": "https://ift.tt/8qjeVuc\nCVE-2019-19698 | marc-q libwav up to 2017-04-20 libwav.c wav_content_read null pointer dereference (ID 25)", "creation_timestamp": "2024-03-09T10:36:37.000000Z"}, {"uuid": "ac3f438f-7d2b-4a48-9cd7-b5d6c065cc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19697", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/538", "content": "#exploit\n1. CVE-2019-16758:\nLexmark Services Monitor 2.27.x - Directory Traversal\nhttps://seclists.org/fulldisclosure/2019/Nov/17\n\n2. CVE-2019-1579:\nRCE in PAN-OS <=7.1.18, <=8.0.11-h1, <=8.1.2 with GlobalProtect Portal/Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code\nhttps://github.com/securifera/CVE-2019-1579\n\n3. CVE-2019-19697:\nTrend Micro Maximum Security is vulnerable to arbitrary code execution as it allows for creation of registry key to target a process running as SYSTEM\nhttps://seclists.org/fulldisclosure/2020/Jan/22", "creation_timestamp": "2024-10-14T22:12:13.000000Z"}, {"uuid": "3ed43b66-097b-4437-ac31-307f0c58274a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-19699", "type": "seen", "source": "https://t.me/cibsecurity/11027", "content": "ATENTION\u203c New - CVE-2019-19699\n\nThere is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803&type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901&o=c&server_id=1 URI. This is triggered via an export of the Poller Configuration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-04-06T20:55:05.000000Z"}]}