CVE-2019-11686

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

CVE-2019-11686: Insufficiently Protected Credentials

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

CVE-2019-10705: Insufficiently Protected Credentials

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

CVE-2019-10706: Insufficiently Protected Credentials

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

PT-2020-9124

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk X600 devices affected versions not specified Description A vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials. Recommendation...

PT-2020-9199

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk X300, X300s, X400, and X600 devices affected versions not specified Description A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters, such as data encryption keys,...

Dell Digital Delivery Default Privilege Error Vulnerability

Dell Digital Delivery is a flexible new way to purchase customizable software that allows you to purchase software with your computer and then automatically download and install that software when you receive your computer. A default permission error vulnerability exists in Dell Digital Delivery...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

Design/Logic Flaw

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342

Dell Digital Delivery prior to version 3.5.2015 contains an incorrect default permissions vulnerability. A locally authenticated, low-privileged user could exploit this to run an arbitrary executable with administrative privileges on the affected system. Affected products/versions are stated in t...

Real-life cybercrime stories from DART, the Microsoft Detection and Response Team

When we published our first blog about the Microsoft Detection and Response Team DART in March of 2019, we described our mission as responding to compromises and helping our customers become cyber-resilient. In pursuit of this mission we had already been providing onsite reactive incident respons...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342: Incorrect Default Permissions

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

PT-2020-18415

Name of the Vulnerable Software and Affected Versions Dell Digital Delivery versions prior to 3.5.2015 Description The issue is related to incorrect default permissions, allowing a locally authenticated low-privileged malicious user to exploit it and run an arbitrary executable with administrativ...

XOO Digital 2.1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================================================================================================== | Title : XOO DIGITAL v2.1.0 Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10...

Are our police forces equipped to deal with modern cybercrimes?

“You should have asked for the presence of a digital detective,” Karen said when I told her what happened at the police station. I had accompanied a neighbor, who is a small business owner, that had been hit with ransomware and wanted to file a report. After listening to his story, the police...

Let's Encrypt Revoking 3 Million TLS Certificates Issued Incorrectly Due to a Bug

The most popular free certificate signing authority Let's Encrypt is going to revoke more than 3 million TLS certificates within the next 24 hours that may have been issued wrongfully due to a bug in its Certificate Authority software. The bug, which Let's Encrypt confirmed on February 29 and was...

SQL Injection Vulnerability in ILAS III Digital Library System

Integrated Library Automation System ILAS is a set of integrated library automation system that can be adapted to the use of libraries of different levels, scales and types at home and abroad, which is undertaken and organized by the Shenzhen Library. ILAS III digital library system SQL injection...