Monthly Archives: December 2022

[CVE-2022-43747] baramundi Management Agent – From Buffer Overflow to Remote Code Execution

baramundi Management Agent (bMA), a module of baramundi Management Suite (bMS) is affected by a buffer overflow vulnerability. An attacker could potentially exploit the vulnerability to crash the affected module, or achieve remote code execution when a certain condition is met.

[CVE-2022-44654] Trend Micro Apex One – Security Flaw in UMH Monitoring Engine Module

CVE-2022-44654 is assigned to a weakness that I have discovered in the User-Mode Hooking (UMH) Monitoring Engine module of Trend Micro Apex One and Apex One as a Service. This module, which helps to monitor for malicious payloads on Windows by injecting itself into each user-mode process and hooking certain Windows APIs, is missing an […]