4412 matches found
Intel SSD Unprotected Access Disclosure
The vulnerability of Intel SSD microprogramming software is related to insufficient control of the flow of data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
CVE-2020-0584
Buffer overflow in firmware for IntelR SSD DC P4800X and P4801X Series, IntelR OptaneTM SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access...
Privacy Drive v3.17.0 - (pdsvc.exe) Unquoted Service Path Vulnerability
Exploit Title: Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.cybertronsoft.com/ Software Link: https://www.cybertronsoft.com/download/privacy-drive-setup.exe Version: Version 3.17.0 Build 1456 Tested on: Microsoft Windows...
Privacy Drive 3.17.0 Unquoted Service Path
Exploit Title: Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path Date: 2020-8-20 Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.cybertronsoft.com/ Software Link: https://www.cybertronsoft.com/download/privacy-drive-setup.exe Version: Version 3.17.0 Build 1456 Tested on:...
CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows
Description of Problem A vulnerability has been identified in Citrix Workspace app and Receiver for Windows that could result in local drive access preferences not being enforced allowing an attacker read/write access to the clients local drives which could enable code execution on the client...
Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path
Exploit Title: Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path Date: 2020-8-20 Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.cybertronsoft.com/ Software Link: https://www.cybertronsoft.com/download/privacy-drive-setup.exe Version: Version 3.17.0 Build 1456 Tested on:...
opendrive.pl Cross Site Scripting vulnerability OBB-1493388
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2023-3324 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim into following a specially crafted link and execu...
CVE-2020-5795
UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...
Design/Logic Flaw
UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...
CVE-2020-5795
UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...
CVE-2020-5795
The CVE-2020-5795 entry concerns TP-Link Archer A7 (US) V5_200721, where UNIX Symbolic Link (Symlink) Following allows an authenticated admin with physical and network access to execute arbitrary code after inserting a crafted USB drive. Connected records (e.g., CNVD-2020-63194 and Red Hat/other ...
This Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT Malware
Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, learn about eight new malware samples that were developed and deployed by Russian hackers in recent attacks. Also, read about how the operators ...
CVE-2020-5795: Improper Link Resolution Before File Access
UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...
PT-2020-18716
Name of the Vulnerable Software and Affected Versions TP-Link Archer A7US version V5 200721 Description The issue allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router. This is due to a UNIX Symbol...
Mail.ru: file read on MCS servers via supplying a QCOW2 image with external backing file
Local file read in mcs.mail.ru by providing QCOW2 disk image with backing image pointing to external file Mail.ru Cloud Solutions allows uploading custom images for disks. This functionality supported QCOW2 disk images. A QCOW2 disk image can have a so-called "backing image" - a file to read...
Scammers Abuse Google Drive to Send Malicious Links
Scammers are leveraging a legitimate Google Drive collaboration feature to trick users into clicking on malicious links. According to reports,, the recent attack stems from Google Drive’s legitimate collaboration feature, which allows users to create push notifications or emails that invite peopl...
Beware a New Google Drive Scam Landing in Inboxes
Scammers are luring people into Google Docs in an attempt to get them to visit potentially malicious websites...
Intel SSD Data Center Tool Privilege Escalation
The vulnerability of the Intel SSD Data Center Tool, a tool for managing and updating embedded software, is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...
