Lucene search
+L

895 matches found

OpenVAS
OpenVAS
•added 2015/10/18 12:00 a.m.•30 views

Debian Security Advisory DSA 3373-1 (owncloud - security update)

Multiple vulnerabilities were discovered in ownCloud, a cloud storage web service for files, music, contacts, calendars and many more. These flaws may lead to the execution of arbitrary code, authorization bypass, information disclosure, cross-site scripting or denial of service. OpenVAS...

10CVSS5.8AI score0.2482EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2015/10/07 10:23 p.m.•16 views

How to Auto-BackUp Your WhatsApp Data to Google Drive with Encryption

What if your phone suddenly slips into a bathtub? Maybe you'll end up losing all your important data, more specifically, your WhatsApp photos, videos, Voice Notes and Chat Data that flows through your chats. Sounds scary, isn't it? But, now you need not worry if your phone suddenly died or broke ...

6.4AI score
SaveExploits0
CNVD
CNVD
•added 2015/09/27 12:00 a.m.•20 views

ownCloud Information Disclosure Vulnerability (CNVD-2015-06359)

ownCloud is an open source personal cloud storage solution. An information disclosure vulnerability exists in ownCloud, allowing remote attackers to exploit the vulnerability to obtain sensitive information...

7.5CVSS6.3AI score0.02627EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/09/06 12:00 a.m.•10 views

EMC Atmos XML External Entity Processing Information Disclosure Vulnerability

EMC Atmos is a globally accessible cloud storage platform that manages content in modern content-rich applications, large-scale content infrastructures and cloud service provider environments. A specific XML external entity reference vulnerability exists in EMC Atmosc that could be exploited by a...

7.5CVSS6.6AI score0.02714EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/07/12 12:00 a.m.•7 views

WordPress S3Bubble Amazon S3 Video And Audio Streaming With Analytics Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.S3Bubble Amazon S3 Video And Audio Streaming With Analytics is a plugin for getting secure streaming from Amazon S3 to the Wordpress website in a plugin...

7AI score
SaveExploits0References1
Veeam
Veeam
•added 2015/05/06 12:00 a.m.•18 views

Possible Issues With Cloud Storages After Restore

Challenge After restoring a machine that was using cloud synchronization software OneDrive, Dropbox, Google Drive, etc., issues are possible when that software attempts synchronization with its service. Those cloud sync solutions may see the restored files as updated changes that need to be...

6.5AI score
SaveExploits0Affected Software1
Debian
Debian
•added 2015/05/02 11:15 a.m.•117 views

[SECURITY] [DSA 3244-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...

6CVSS1.7AI score0.0219EPSS
SaveExploits0
myhack58
myhack58
•added 2015/03/18 12:00 a.m.•21 views

Android DropBox SDK Vulnerability, CVE-2 0 1 4-8 8 8 9 analysis-vulnerability warning-the black bar safety net

Today, personal data are stored in the cloud, which makes it like a photo backup or General storage as service can not only be accessed by the user, can also be representative of the user of the app the access. In many ways, including access to the control functions of the app and the service...

0.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/02/11 7:17 a.m.•20 views

File Hosting Service RapidShare Shutting Down

Remember RapidShare? Once one of the world's most popular and first ever one-click online file hosting and cloud storage website on the Internet. The company has announced that it will shut down its business at the end of next month. RapidShare file hosting service announced its shut down Tuesday...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/02/10 8:52 p.m.•20 views

Complete Google Security Checkup, Get 2GB Extra Google Drive Space

Google has found an excellent idea to celebrate Safer Internet Day. The search engine giant is offering a nice perk for its users who complete a quick Security Checkup by February 17th. No doubt, its willing to bribe us, , but you probably should review your security settings anyway, and I loved...

6.8AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/09/11 1:24 p.m.•16 views

Congress Urged to Update ECPA with Email Privacy Protection

A coalition of digital rights groups and electronic privacy advocates are urging both houses of Congress to consider updating the Electronic Privacy Act of 1986 ECPA, which they claim is an archaic law exploited by the government to obtain the contents of emails without first obtaining a probable...

0.1AI score
SaveExploits0References2
The Hacker News
The Hacker News
•added 2014/04/23 7:38 p.m.•18 views

Microsoft OneDrive Secretly Modifies your BackUp Files

Until now, our privacy has been violated by many big Internet Services, including Google who uses our personal information for the advertising purposes and this is exactly how the companies handle the mass of personal data we provide them. But, recent report about another big giant Microsoft show...

6.5AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/02/18 12:00 a.m.•43 views

CTERA Cloud Storage OS项目文件夹描述脚本注入漏洞

CTERA Cloud Storage OS是一款云存储系统。 CTERA Cloud Storage OS不正确过滤项目文件夹中的描述字段数据,允许远程攻击者利用漏洞注入恶意脚本或HTML代码,当恶意数据被查看时,可获取敏感信息或劫持用户会话。 0 CTERA Cloud Storage OS 3.2.29.0 CTERA Cloud Storage OS 3.2.42.0 厂商补丁: CTERA ----- CTERA Cloud Storage OS 4.0.7已经修复该漏洞,建议用户下载更新:...

4.3CVSS6.6AI score0.01405EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2014/02/14 12:00 a.m.•44 views

Boxcryptor Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2014-001 - Original release date: February 4, 2014 - Last revised: February 4, 2014 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: - =============================================...

7.4AI score
SaveExploits0
NVD
NVD
•added 2014/02/11 5:55 p.m.•20 views

CVE-2013-2639

Cross-site scripting XSS vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder...

4.3CVSS5.6AI score0.01405EPSS
SaveExploits5References2
Prion
Prion
•added 2014/02/11 5:55 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder...

4.3CVSS6.1AI score0.01405EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2014/02/11 5:00 p.m.•32 views

CVE-2013-2639

Cross-site scripting XSS vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder...

5.6AI score0.01405EPSS
SaveExploits5References2
CVE
CVE
•added 2014/02/11 5:00 p.m.•58 views

CVE-2013-2639

CTERA Cloud Storage OS is affected by a Stored XSS in the Project Folder description field. Vulnerable on versions prior to 3.2.29.0 and 3.2.42.0; successful exploitation allows remote attackers to inject arbitrary script/HTML (risk includes possible session data exposure as noted in public write...

4.3CVSS5.8AI score0.01405EPSS
SaveExploits5References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/11 12:00 a.m.•3 views

CVE-2013-2639: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder...

4.3CVSS6AI score0.01405EPSS
SaveExploits5References2
zdt
zdt
•added 2014/02/08 12:00 a.m.•51 views

CTERA 3.2.29.0 and 3.2.42.0 - Stored XSS

Exploit for php platform in category web applications OVERVIEW Standard Ctera User can define a particular “description” for a ProjectFolder that cause javascript code execution and HTML injection. INTRODUCTION CTERA Networks http://www.ctera.combridges the gap between cloud storage and local...

4.3CVSS6.5AI score0.01405EPSS
SaveExploits5
Rows per page
Query Builder