TrendMicro node.js HTTP server listening on localhost can execute commands
Quote:
When you install TrendMicro Antivirus on Windows, by default a component called Password Manager is also installed and automatically launched on startup.
Password Manager Software - Trend Micro USA
This product is primarily written in JavaScript with node.js, and opens multiple HTTP RPC ports for handling API requests.
It took about 30 seconds to spot one that permits
...
