Microsoft OneDrive untrustworthy search path vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. An untrustworthy search path vulnerability exists in Microsoft OneDrive. An attacker can exploit this vulnerability with a malicious DLL in t...

CVE-2018-0592

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0593

Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0592

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0592

CVE-2018-0592 affects Microsoft OneDrive with an untrusted search path/DLL planting issue. The vulnerability arises when a Trojan horse DLL placed in the application’s directory can execute with the user’s privileges, enabling arbitrary code execution if exploited locally. Affected context is the...

CVE-2018-0593

The CVE-2018-0593 entry affects the Microsoft OneDrive installer, which has an untrusted search path vulnerability (DLL planting) that can allow privilege escalation by placing a Trojan DLL in the installer’s directory. Root cause: insecure DLL search order in the installer. Impact described: arb...

Shining a Light on OAuth Abuse with PwnAuth

Introduction Spear phishing attacks are seen as one of the biggest cyber threats to an organization. It only takes one employee to enter their credentials or run some malware for an entire organization to become compromised. As such, companies devote significant resources to preventing credential...

Description of the security update for SharePoint Server 2016: May 8, 2018

Description of the security update for SharePoint Server 2016: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following...

Microsoft Windows: Prevent the usage of OneDrive for file storage

This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: - Users can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Office: Show OneDrive Sign In

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013skydrivesignin.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Show OneDrive Sign In Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Sensitive data types in Veeam Backup & Replication and Veeam Backup for Microsoft 365 log files

Challenge When you open a support ticket, Veeam Customer Support specialists may request log files. These log files may contain information to which the terms of the data protection laws or internal company policies apply. Veeam Backup & Replication Veeam Backup & Replication log files may includ...

Description of the security update for SharePoint Enterprise Server 2016: March 13, 2018

Description of the security update for SharePoint Enterprise Server 2016: March 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, go ...

Fedora 26 : php (2018-c4e9207c31)

PHP version 7.1.13 04 Jan 2018 Core: - Fixed bug php75573 Segmentation fault in 7.1.12 and 7.0.26. Laruence - Fixed bug php75384 PHP seems incompatible with OneDrive files on demand. Anatol - Fixed bug php74862 Unable to clone instance when private clone defined. Daniel Ciochiu - Fixed bug php750...

Fedora 27 : php (2018-d034538627)

PHP version 7.1.13 04 Jan 2018 Core: - Fixed bug php75573 Segmentation fault in 7.1.12 and 7.0.26. Laruence - Fixed bug php75384 PHP seems incompatible with OneDrive files on demand. Anatol - Fixed bug php74862 Unable to clone instance when private clone defined. Daniel Ciochiu - Fixed bug php750...

Description of the security update for SharePoint Server 2016: December 12, 2017

Description of the security update for SharePoint Server 2016: December 12, 2017 Summary An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could...

Cloud Client Side File Encryption: Cryptomator

Multi-platform transparent client-side encryption of your files in the cloud. Cryptomator provides transparent, client-side encryption for your cloud. Protect your documents from unauthorized access. Cryptomator is free and open source software, so you can rest assured there are no backdoors...

Description of the security update for SharePoint Foundation 2013: October 10, 2017

Description of the security update for SharePoint Foundation 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for SharePoint Enterprise Server 2016: October 10, 2017

Description of the security update for SharePoint Enterprise Server 2016: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, s...