CVE-2022-28387

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affec...

CVE-2022-38392

Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service device malfunction and system crash via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported produ...

CVE-2021-20870

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier,...

I-O Data HDL-T 操作系统命令注入漏洞

I-O Data HDL-T is a series of network hard disks from I-O Data Japan. An operating system command injection vulnerability exists in I-O Data HDL-T versions 1.21 and earlier, which stems from OS command injection and could lead to the execution of arbitrary OS commands...

CVE-2025-26688

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

CVE-2025-26688

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

CVE-2025-26688

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

CVE-2025-26688

CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...

PT-2025-15526

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Hard Drive affected versions not specified Description: The issue is related to a stack-based buffer overflow that allows an authorized attacker to elevate privileges locally. This elevation-of-privilege vulnerability can be...

CVE-2025-26688: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

CVE-2024-12644 Chunghwa Telecom tbm-client - Arbitrary File Copy and Paste

The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through...

Diebold Nixdorf Vynamic Security Suite 安全漏洞

Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite that originates from the inability to validate symbolic links during the pre-boot authorization process, which...

Diebold Nixdorf Vynamic Security Suite 安全漏洞

Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite that originates from the inability to validate /etc/mtab during pre-boot authorization, which can be exploited...

Failure to Store Cache on Local Hard Drive

Even after selecting “cache is on device hard drive”, cache is getting stored on the Provisioning Service PVS server. The following screen shot shows the virtual disk status:...

Motorola Solutions Vigilant Fixed LPR Coms Box Security Vulnerability

Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. A security vulnerability exists in the Motorola Solutions Vigilant Fixed LPR Coms Box, which arises from data being stored in clear text, which could allow an unauthorized user to...

Persistence – Disk Clean-up

Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...

Persistence – Disk Clean-up

Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...

CVE-2023-2991

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

!Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server \FIXED\https://blog.rapid7.com/content/images/2023/06/GettyImages-1345443906.jpg Earlier this year, Rapid7 researchers undertook a project to analyze managed file transfer applications, due to the number of recent...

PT-2023-22466

Name of the Vulnerable Software and Affected Versions Fortra Globalscape EFT affected versions not specified Description The administration server of Fortra Globalscape EFT has an information disclosure issue. This allows the serial number of the hard drive where Globalscape is installed to be...