CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...

SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation

SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation Document Title: ================ SolarWinds Kiwi CatTools Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction...

Unauthorized Access Vulnerability in Founder's Firewall

Founder Firewall is a protection system developed by Founder Group to maintain information security. An unauthorized access vulnerability exists in the Founder's Firewall, which allows an attacker to exploit the vulnerability to obtain a configuration backup file with unauthorized access to obtai...

Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...

The vulnerability of the Android operating system, which allows a hacker to access the backup data.

The vulnerability of the software interface of the Android operating system’s framework is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data backups through a specially created application...

Zero-Day Warning! Ransomware targets Microsoft Office 365 Users

If just relying on the security tools of Microsoft Office 365 can protect you from cyber attacks, you are wrong. Variants of Cerber Ransomware are now targeting MS Office 365 email users with a massive zero-day attack that has the ability to bypass Office 365's built-in security tools. According ...

Apache OpenMeetings ZIP File Path Traversal (CVE-2016-0784)

A directory traversal vulnerability exists in Apache OpenMeetings in the Import/Export System Backups functionality. The vulnerability is due to missing file path validation on user-uploaded ZIP archives. Successful exploitation allows the attacker to execute arbitrary code under the security...

Teampass v2.1.25 - Unauthenticated Access Vulnerability

Document Title: =============== Teampass v2.1.25 - Unauthenticated Access Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1844 Release Date: ============= 2016-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 18...

China wants Apple's Source Code, but the Company Refused

In Brief Apple's head of legal has denied all rumors about providing its complete source code or any backdoor to the Chinese government. Apple officially confirmed that the Chinese government has asked Apple twice in the past two years to hand over the source code for its operating system, but th...

US, Canada Issue Ransomware Advisory

Ransomware clearly has people on many fronts worried, so much so that the United States and Canada took an unprecedented step last week to issue a joint advisory on the threat posed by crypto-ransomware. The U.S. Cyber Emergency Response Team together with the Canadian Cyber Incident Response...

Apache OpenMeetings 3.1.0 Path Traversal

Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings 1.9.x - 3.1.0 Description: The Import/Export System Backups functionality in the OpenMeetings Administration menu http://domain:5080/openmeetings/admin/backup is vulnerable to path traversal via...

Apache OpenMeetings OpenMeetings Administration Menu Directory Traversal Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A directory traversal vulnerability...

About the security content of OS X Server 5.1

About the security content of OS X Server 5.1 This document describes the security content of OS X Server 5.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are...

Apple hires developer of World's Most Secure Messaging App

Apple is serious this time to enhance its iPhone security that even it can not hack. To achieve this the company has hired one of the key developers of Signal — World's most secure, open source and encrypted messaging app. Frederic Jacobs, who worked to develop Signal, announced today that he is...

Backup Guard < 1.0.3 - Authenticated Arbitrary File Upload

The plugin allowed any authenticated user to call the AJAX actions, including the one to import backups which could lead to arbitrary file upload...

Debian DLA-390-1 : dbconfig-common security update

It was discovered that dbconfig-common could, depending on the local umask, make PostgreSQL database backups that were readable by other users than the database owner. The issue is fixed in version 1.8.46+squeeze.1. Access rights to existing database backups not only for PostgreSQL will be limite...

CryptoWall Ransomware raised $325 Million in Revenue for Its Developer

The Creators of the notorious CryptoWall ransomware virus have managed to raise more than $325 million £212 million in this past year alone. Ransomware has emerged as one of the biggest cyber threats to web users in recent times. Typically, hackers primarily gain access to a user's computer syste...

The vulnerability of the Mac OS X operating system allows a hacker to gain access to the security button.

The vulnerability of the backup mechanism implemented in the Time Machine component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to the security key...

Hyper-V crash consistent Backups/Replicas due to McAfee mfehidk driver

Challenge If McAfee FS minifilter MFEHIDK driver is loaded into Windows kernel, then it doesn't allow any other driver to load at lower altitudes, it only allows other drivers to load at higher altitudes, supposedly because of proactive defense logic of McAfee Antivirus. Therefore Veeam CBT drive...

Apple iOS iOS Backup Password Reset Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows physically accessible local users to be able to reset passwords for failed iOS backup attempts...