39 matches found
WordPress Share-one-Drive | OneDrive & SharePoint plugin for WordPress plugin 2.0-3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by WP Cloud Plugins in WordPress Plugin Share-one-Drive versions 2.0-3.8.3...
GHSA-HQ88-5X99-X3GF Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials
Summary Cloudreve 4.16.1 has an OAuth scope authorization bypass in the admin storage policy routes. An OAuth bearer token scoped to Admin.Read but not Admin.Write can call POST /api/v4/admin/policy/oauth/signin and update OneDrive storage policy credentials. The route is inside the admin group...
PT-2026-50548
Public exploit code has been released for four Linux kernel vulnerabilities, each allowing a local user to escalate privileges to root. While kernel maintainers have patched all four over the past few weeks, the public availability of working exploits means any unpatched system is now at immediat...
MAL-2026-5612 Malicious code in gpt-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...
MAL-2026-5572 Malicious code in sendgrid-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f1d48bc557c6afa69c74455fe35f34ed0992082dc30fc09d032523d2329f63 Package impersonates the official SendGrid npm packages @sendgrid/ but ships no SDK functionality — index.js exports an empty object. Its sole purpos...
Description of the security update for SharePoint Server 2016 Language Pack: May 12, 2026 (KB5002869)
None None...
New Search Experience for Veeam Data Cloud for Microsoft 365
Purpose We are excited to announce the initial rollout of our new search feature, designed to significantly improve the speed and efficiency of your search experience. Below are the details and important limitations to be aware of during this phased rollout. What's New Faster Search Experience Ou...
Description of the security update for SharePoint Server 2016 Language Pack: March 10, 2026 (KB5002851)
None None...
January 24, 2026—KB5078132 (OS Build 22631.6495) Out-of-band
None None...
January 24, 2026—KB5078133 (OS Build 25398.2097) Out-of-band
None None...
Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)
None None...
[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
CVE-2025-60722
Improper limitation of a pathname to a restricted directory 'path traversal' in OneDrive for Android allows an authorized attacker to elevate privileges over a network...
CVE-2025-60722 Microsoft OneDrive for Android Elevation of Privilege Vulnerability
...
CVE-2025-60722 Microsoft OneDrive for Android Elevation of Privilege Vulnerability
...
Patch Tuesday, October 2025 ‘End of 10’ Edition
Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October's Patch Tuesday also marks the final month that Microsoft will ship security updates for...
EUVD-2021-29517
Malicious code in bioql PyPI...
Description of the security update for SharePoint Server 2016 Language Pack: September 9, 2025 (KB5002777)
None None...
