15077 matches found
Western Digital My Cloud Multiple Products < 5.04.114 Multiple Vulnerabilities
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
Security and the One Percent: A Thought Exercise in Estimation and Consequences
There's a good chance that if you're reading this post, you're the member of an exclusive club. I call it the security one percent, or the security 1% or securityonepercent on Twitter. This is shorthand for the assortment of people and organizations who have the personnel, processes, technology,...
giovanni-stpauli.digital-guest.de Cross Site Scripting vulnerability OBB-1464612
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Validation Bypass
xml-crypto is vulnerable to validation bypass. The vulnerability exists through a possible key confusion by injecting a valid HMAC-SHA1 signature, as both HMAC and the public key digital signature methods key shares the same variable...
CVE-2020-27744
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...
CVE-2020-27744
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...
Remote code execution
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...
CVE-2020-27744
CVE-2020-27744 concerns Western Digital My Cloud NAS devices affected by firmware prior to 5.04.114. The issue enables remote code execution with resulting privilege escalation. The public descriptions consistently identify the device family and vulnerable firmware range but do not disclose the u...
CVE-2020-27744
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...
The World Has Moved Online. Has Your Business Adapted?
What would happen if everything we do in the world were to suddenly go online? We got the answer to that question early this year, when the global coronavirus pandemic forced almost everyone and everything to move online: commerce, meetings with colleagues and customers, classroom learning,...
How Maria Barsallo Lynch Helps Combat the Spread of Misinformation and Disinformation Ahead of the Election
In our most recent episode of Security Nation, we spoke with Maria Barsallo Lynch, Executive Director of the Defending Digital Democracy Project D3P at the Belfer Center for Science and International Affairs at the Harvard Kennedy School, about her work informing election officials of the rise of...
CVE-2020-27744: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...
PT-2020-16797
Name of the Vulnerable Software and Affected Versions Western Digital My Cloud NAS devices versions prior to 5.04.114 Description An issue was discovered that allows remote code execution with resultant escalation of privileges. Recommendations For versions prior to 5.04.114, update to version...
How the Pandemic is Reshaping the Bug Bounty Landscape
The pandemic has overhauled the bug-bounty landscape, both for companies looking to adopt such programs and the bounty hunters themselves. Casey Ellis, founder and CTO of Bugcrowd, said that COVID-19’s far-reaching implications — including increasing the acceptance of remote work, pushing more...
Is It Worth It to Defend Your Service from Video Piracy?
The answer isn't obvious. From headcount to vendor spend, combating video piracy is expensive. And piracy has been a part of the entertainment industry since the silent movie era. It's not crazy to say, "Maybe it's just a cost of doing show business." So let's start with a different question. How...
Western Digital My Cloud Remote Code Execution Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. A remote code execution vulnerability exists in Western Digital My Cloud Devices prior to version 5.4.1140, which originates from remote code execution due to insufficient user input validation in reg device.php. No...
Western Digital My Cloud NAS Elevation of Privilege Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. An elevation of privilege vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from a remote code execution vulnerability in cgi api.php that allows privilege escalation. No...
CVE-2020-27158
Addressed remote code execution vulnerability in cgiapi.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114...
CVE-2020-27159
Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...