1764 matches found
CVE-2020-13248
BooleBox Secure File Sharing Utility pre-4.2.3.0 suffers a stored XSS vulnerability (CVE-2020-13248) in the My Account avatar data sent to Account.aspx. A crafted avatar field can execute scripts in the affected session. Root cause: insufficient validation of the avatar JSON parameter. The CVE en...
PT-2020-13395
Name of the Vulnerable Software and Affected Versions BooleBox Secure File Sharing Utility versions prior to 4.2.3.0 Description The issue allows for stored XSS via a crafted avatar field within My Account JSON data to the "Account.aspx" endpoint. This can be exploited by manipulating the avatar...
PT-2020-13394
Name of the Vulnerable Software and Affected Versions BooleBox Secure File Sharing Utility versions prior to 4.2.3.0 Description The issue allows for CSV injection through a crafted user name that is mishandled during export from the activity logs in the Audit Area. Recommendations For versions...
CVE-2020-13248: Improper Neutralization of Input During Web Page Generation
BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx...
CVE-2020-13247: Improper Neutralization of Formula Elements in a CSV File
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...
11 security tips to help stay safe in the COVID-19 era
The COVID-19 pandemic has changed our daily routines, the ways we work, and our reliance on technology. Many of us are now working remotely, students are attending classes virtually, and we’re relying more on social media and social networks to stay connected as we define what our new normal look...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
Zoom Client Application Chat Code Snippet Remote Code Execution Vulnerability
Summary An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. An attacke...
Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets
Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...
Nextcloud: Bypass hide download Nextcloud Share
Summary Hello everyone, accidentally browsing through nextcloud, I have found a small vulnerability on nextcloud server. This vulnerability allow download the file when the download function has been hidden Here is the error details. If anything is wrong please respond to me. Thanks you...
Microsoft Sway Abused in Office 365 Phishing Attack
A highly targeted phishing campaign, with a Microsoft file platform twist, has successfully siphoned the Office 365 credentials of more than 150 executives since mid-2019. Researchers attribute the campaign’s success to two parts: First, it leverages multiple Microsoft file-sharing services to...
Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies
In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore. Dubbed 'PerSwaysion ,' the newly spotted cyberattack campaign leveraged...
File Sharing And Chat 1.0 Denial Of Service
Document Title: =============== File Sharing & Chat v1.0 iOS - Denial of Service Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2222 Release Date: ============= 2020-04-27 Vulnerability Laboratory ID VL-ID:...
File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability
Document Title: =============== File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2222 Release Date: ============= 2020-04-26 Vulnerability Laboratory ID VL-ID:...
Banking.BR Android Trojan Emerges in Credential-Stealing Attacks
A recently uncovered banking trojan aims to steal Android victims’ online banking credentials and take over their bank accounts, using “elaborate” overlay attack capabilities. The malware, dubbed “Banker.BR” by researchers with IBM X-Force, was spotted in messages targeting users in countries tha...
How to Create Serverless File Sharing with Azure Files
Did you happen to leave some of those pesky Windows® file servers on-premises in your journey to the cloud? Follow along as we explore Azure Files and how it can help you complete your cloud journey...
AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting Vulnerability
Exploit for iOS platform in category web applications Title: AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting Vendor: http://www.app2pro.com Software Link: https://apps.apple.com/us/app/airdisk-pro-wireless-flash/id505904421 CVE: N/A Document Title: =============== AirDisk Pro v5.5.3 i...
AirDisk Pro 5.5.3 Persistent Cross Site Scripting
Document Title: =============== AirDisk Pro v5.5.3 iOS - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2203 Release Date: ============= 2020-04-15 Vulnerability Laboratory ID VL-ID:...
AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting
Title: AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-04-15 Vendor: http://www.app2pro.com Software Link: https://apps.apple.com/us/app/airdisk-pro-wireless-flash/id505904421 CVE: N/A Document Title: =============== AirDisk Pro v5.5.3 iOS -...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...