[SECURITY] Fedora 34 Update: gnome-online-miners-3.34.0-8.fc34

GNOME Online Miners provides a set of crawlers that go through your online content and index them locally in Tracker. It has miners for Facebook, Flic kr, Google, OneDrive and Nextcloud...

Fedora: Security Advisory for gnome-online-miners (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Metasploit Wrap-Up

Baron Samedit is coming to get you Last week, a critical bug in sudo came out and could potentially affect most of the Linux-based operating systems, since this tool is usually installed by default. This vulnerability is identified as CVE-2021-3156, but better known as "Baron Samedit", and is...

OneDrive Sync Provider Enumeration Module

This module will identify the Office 365 OneDrive endpoints for both business and personal accounts across all users providing access is permitted. It is useful for identifying document libraries that may otherwise not be obvious which could contain sensitive or useful information. Module Options...

Microsoft OneDrive for Mac suffers from dll hijacking vulnerability (CNVD-2021-05387)

Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...

Microsoft OneDrive for Mac suffers from dll hijacking vulnerability

Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...

Microsoft OneDrive for Mac suffers from dll hijacking vulnerability (CNVD-2021-05386)

Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...

Microsoft OneDrive suffers from dll hijacking vulnerability

OneDrive is Microsoft's new generation of network storage tools, renamed from SkyDrive.OeDrive's versions span multiple endpoints, including web, mobile, and PC. Microsoft OneDrive has a dll hijacking vulnerability that can be exploited by attackers to remotely control a user's computer or implan...

Microsoft OneDrive suffers from a DLL hijacking vulnerability (CNVD-2021-03304)

OneDrive is Microsoft's next-generation network storage tool, renamed from SkyDrive.OeDrive's versions span multiple endpoints, web, mobile, and PC. Microsoft OneDrive has a DLL hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan...

Security update for rclone (moderate)

openSUSE Security Update: Security update for rclone Announcement ID: openSUSE-SU-2020:2168-1 Rating: moderate References: 1179005 Cross-References: CVE-2020-28924 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update fo...

Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign

A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe, using a strain of a 13-year old backdoor trojan named Bandook. According to Check Point Research, Bandook was last spotted being used in 2015 and 2017/2018, in the “Operation Manul” and “Dark Caracal”...

openSUSE Security Update : rclone (openSUSE-2020-2035)

This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

openSUSE Security Update : rclone (openSUSE-2020-2008)

This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

Security update for rclone (moderate)

openSUSE Security Update: Security update for rclone Announcement ID: openSUSE-SU-2020:2035-1 Rating: moderate References: 1179005 Cross-References: CVE-2020-28924 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for rclone...

Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks

Microsoft has suspended 18 Azure Active Directory applications that were being leveraged for command-and-control C2 infrastructure by what it says is a Chinese nation-state actor. While Microsoft services like Azure Active Directory AD – its cloud-based identity and access management service – ar...

The vulnerability of the OneDrive for Windows file sharing service, related to the improper handling of symbolic links, allows a hacker to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to the improper handling of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Online-only files in OneDrive folder not backed up by Veeam Agent for Microsoft Windows

Challenge A restore point created by Veeam Agent for Microsoft Windows appears to be missing files from a user's OneDrive folder. Upon further investigation, it is determined that Files On-Demand was enabled, and the missing files were in an Online-only state at the time of backup. Cause As a...

CVE-2020-16853

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...

CVE-2020-16851

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...