CVE-2024-29640

An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the actionqueryqrcode component...

CVE-2024-29640: Improper Neutralization of Special Elements used in an OS Command

An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the actionqueryqrcode component...

APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

The Russia-linked threat actor known as APT28 has been linked to multiple ongoing phishing campaigns that employ lure documents imitating government and non-governmental organizations NGOs in Europe, the South Caucasus, Central Asia, and North and South America. "The uncovered lures include a...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:GHSA-2QPH-QPVM-2QF7...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:RUSTSEC-2024-0341...

Fedora: Security Advisory for maven-wagon (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: maven-wagon-3.5.3-7.fc40

Maven Wagon is a transport abstraction that is used in Maven's artifact and repository handling code. Currently wagon has the following providers: File HTTP FTP SSH/SCP WebDAV SCM in progress...

CVE-2024-1192

A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...

Design/Logic Flaw

A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra aka DarkCasino targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails...

CVE-2024-1192 South River WebDrive New Secure WebDAV denial of service

A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...

CVE-2024-1192

The CVE-2024-1192 entry concerns South River WebDrive 18.00.5057. An issue in the New Secure WebDAV component can cause a denial of service, with the attack requiring local access. The vulnerability is linked to public exploit/disclosure, and multiple connected sources corroborate the affected pr...

CVE-2024-1192 South River WebDrive New Secure WebDAV denial of service

A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...

PT-2024-17346 · South River · South River Webdrive

Name of the Vulnerable Software and Affected Versions: South River WebDrive version 18.00.5057 Description: A vulnerability was found in the New Secure WebDAV component, which can lead to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the...

CVE-2024-1192: Improper Resource Shutdown or Release

A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...

Initial Access – search-ms URI Handler

Microsoft search protocol enables clients to initiate connections against an enterprise search service such as SharePoint or WebDav. During these search connections the protocol server… Continue reading - Initial Access - search-ms URI Handler...

Initial Access – search-ms URI Handler

Microsoft search protocol enables clients to initiate connections against an enterprise search service such as SharePoint or WebDav. During these search connections the protocol server… Continue reading - Initial Access - search-ms URI Handler...

The vulnerability of the mod_webdav.so module of the Wi-Fi router software by ASUS RT-AX92U allows a hacker to gain access to protected information.

The vulnerability of the modwebdav.so module in the ASUS RT-AX92U Wi-Fi router software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information...

OwnCloud 10.6.x < 10.13.1 WebDav Authentication Bypass

An Authentication Bypass was discovered in OwnCloud 10.6.x prior to 10.13.1 in the WebDAV protocol. An unauthenticated attacker can access, modify or delete any file if a victim's username is known and the victim has no signing key configured because pre-signed URLs can be accepted even if no...

ownCloud Security Breach

ownCloud is a personal cloud storage solution from US-based ownCloud, Inc. A security vulnerability exists in ownCloud core versions 10.6.0 through 10.13.0, which can be exploited to bypass WebDAV Api authentication using a pre-signed URL...