Design/Logic Flaw

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...

CVE-2023-45084

SoftIron HyperCloud CVE-2023-45084 affects density storage nodes running HyperCloud 1.0–pre-2.0.3. A missing synchronization flaw allows removing and reinserting a drive caddy without reboot to cause the system to treat the caddy as new media, wiping all data on the drives. Impact: data availabil...

CVE-2023-45084 Media caddy removal and reinsertion without reboot may cause data loss

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...

WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Integrate Google Drive Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49769 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4a68198b91d6 Credits Mika Require...

PT-2023-29401

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 1.0 through 2.0.2 Description An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data...

SoftIron HyperCloud Security Vulnerability

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud versions 1.0 through prior to 2.0.3, which stems from the fact that removing and re-inserting a drive caddy without rebooting causes the system to recognize the caddy as ...

CVE-2023-49297: Deserialization of Untrusted Data

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

The vulnerability of Intel Optane solid-state storage’s microprogramming software, related to the implementation of incorrect control flow, allows a hacker to trigger a service failure.

The vulnerability of Intel Optane solid-state storage’s microprogramming software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Intel® Optane(TM) solid-state storage devices’ microprogramming software, related to access control deficiencies, allows attackers to disclose protected information.

The vulnerability of Microprogramming Software for Intel® OptaneTM solid-state drives is related to access control deficiencies. Exploiting this vulnerability could allow attackers to disclose protected information...

USN-6522-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled drive redirection. If a user were tricked into connection to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2022-41877 It was...

USN-6522-1 freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled drive redirection. If a user were tricked into connection to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2022-41877 It was...

CVE-2023-29061

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

Authentication flaw

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061

BD FACSChorus is affected by CVE-2023-29061 due to missing BIOS password on the workstation. In BD FACSChorus v5.0, v5.1, v3.0, and v3.1, a threat actor with physical access can access BIOS settings and modify boot order and pre-boot authentication. CVSS v3.1 base score 5.2 (AV:P, AC:L, PR:N, UI:...

PT-2023-22118

Name of the Vulnerable Software and Affected Versions FACSChorus workstation affected versions not specified Description The issue concerns the lack of a BIOS password on the FACSChorus workstation. This allows a threat actor with physical access to potentially exploit the issue and access the BI...

Integrate Google Drive < 1.3.3 - Open Redirect via state

Description The plugin does not validate the state parameter before redirecting the user to its value, leading to an Open Redirect issue...

DRD Fleet Leasing DRDrive SQL Injection Vulnerability

DRD Fleet Leasing DRDrive is a mobile application from DRD Fleet Leasing. A security vulnerability exists in versions prior to DRD Fleet Leasing DRDrive 20231006 that stems from the presence of a SQL injection vulnerability...

NetSupport RAT Infections on the Rise - Targeting Government and Business Sectors

Threat actors are targeting the education, government and business services sectors with a remote access trojan called NetSupport RAT. "The delivery mechanisms for the NetSupport RAT encompass fraudulent updates, drive-by downloads, utilization of malware loaders such as GHOSTPULSE, and various...

Dell OS Recovery Tool 安全漏洞

Dell OS Recovery Tool is a system recovery tool. When the user's Dell computer fails to enter the system due to hard disk replacement/corruption or software reasons, the recovery USB flash drive created by Dell OS Recovery Tool can be used to restore the factory system settings of the Dell comput...

PrestaShop BLOG Drive High Traffic Boost SEO Security Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The program provides multiple payment methods, SMS alerts and product image zoom and other features. A security vulnerability exists in PrestaShop BLOG Drive High Traffic Boost SEO prior to v4.4.0, which...