4850 matches found
Azure File Sync Agent v10.1 Release – June 2020 (KB4522411)
Update for Azure File Sync agent version 10.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Acronis: Arbitrary file creation via symlink attack on syncagentsrv (Acronis Sync Agent Service)
Issue class description Arbitrary file creation is a vulnerability that allows attacker to create file in arbitrary location within filesystem. This includes protected directories, such as C:\Windows, C:\windows\system32 and "C:\Program Files". If in addition, attacker has control over the file...
The vulnerability of the Windows Sync Host Service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the Windows Sync Host Service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...
Release Notes for Veeam Backup & Replication 10a
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 10a. Cause Please confirm that you are running version 9.5 Update 3 build 9.5.0.1536 or later prior to upgrading...
Microsoft Windows Sync Host Service Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Sync Host Service. The...
Acronis: Acronis Sync Agent Service - Untrusted DLL Search-Ordering lead to Privilege Escalation
Vulnerability description not provided...
CVE-2020-1434
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'...
CVE-2020-1434
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'...
CVE-2020-1434
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'...
CVE-2020-1434
CVE-2020-1434: Windows Sync Host Service Elevation of Privilege. CNVD-2020-52919 confirms an in-memory handling flaw in Windows Sync Host Service, enabling a local attacker to execute code with elevated privileges by running a specially crafted application. No exploit details or patch/remediation...
Windows Sync Host Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory. An attacker who successfully exploited the vulnerability could allow an application with limited privileges on an affected system to execute code at a medium integrity level. To...
Storage Plan Stuck in "Resetting" State
Challenge After Undoing a Halted Storage Plan or Resetting a Halted Storage Plan, the plan enters the "Resetting" state and cannot switch to another state. Cause If you have a large infrastructure or encounter any internal issues within the Veeam ONE database, the undo or reset operation may not...
Linux client is vulnerable to directory traversal when downloading files (NC-SA-2020-032)
Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory...
ASUS Aura Sync 1.07.71 CVE-2019-17603 - Privilege Escalation
ASUS Aura Sync version 1.07.71 ene.sys privilege escalation kernel exploit. // CVE-2019-17603: ASUS Aura Sync 1.07.71 'ene.sys' EoP Kernel Exploit // Discovered by @dhn // Author of PoC: Connor McGarr @33y0re - https://connormcgarr.github.io // Windows 10 RS1 Version 10.0.14393 Build 14393 //...
ASUS Aura Sync 1.07.71 Privilege Escalation Exploit
// CVE-2019-17603: ASUS Aura Sync 1.07.71 'ene.sys' EoP Kernel Exploit // Discovered by @dhn // Author of PoC: Connor McGarr @33y0re - https://connormcgarr.github.io // Windows 10 RS1 Version 10.0.14393 Build 14393 // Tested with VBS, HyperGuard, and PatchGuard disabled include include include //...
Acronis: Account Takeover on unverified emails in File Sync & Share
Summary The name change functionality in File Sync & Share is expected to change the name in File Sync & Share. But the API endpoint used in it also allows changing email to any email without having to verify the email. The login email stays the same but the email within File Sync & Share...
SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1605-1)
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...
Sync Breeze Enterprise Denial of Service Vulnerability
Sync Breeze Enterprise is a file synchronization utility that allows you to synchronize and manage the disk files of your networked computers, mainly used to categorize, save and manage files. A denial of service vulnerability exists in Sync Breeze Enterprise. An attacker can exploit the...