CryptWare CryptoPro Secure Disk for Bitlocker Local Security Bypass Vulnerability

CryptWare CryptoPro Secure Disk for Bitlocker is a secure disk product from CryptWare IT Security, Germany, that centrally manages Microsoft BitLocker! disk encryption utility through its own Pre-Boot Authentication PBA feature. A local security bypass vulnerability exists in CryptWare CryptoPro...

Failed to convert vdisk with error message "BNIStack failed, network stack could not be initialized"

Target device unable to startup with error "BNIStack failed, network stack could not be initialized"...

SUSE SLED12 / SLES12 Security Update : ctags (SUSE-SU-2016:2097-1)

This update for ctags fixes the following issues : - CVE-2014-7204: Potential denial of service infinite loop and CPU and disk consumption via a crafted JavaScript file. bsc899486 - Missing Requirespost on coreutils as it is using rm1. bsc976920 Note that Tenable Network Security has extracted th...

So I lost my OpenBSD FDE password

The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase. We know things get interesting when I lose a password. I did a weak attempt at finding some public bruteforce tool, and found nothing...

CryptWare CryptoPro Secure Disk For Bitlocker 5.1.0.6474 Manipulation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Manipulation of pre-boot authentication product: CryptWare CryptoPro Secure Disk for Bitlocker vulnerable version: 5.1.0.6474 fixed version: 5.2.1 CVE number: - impact:...

How to Manage RAID Disk Allocation on NetScaler SDX 14000/15000/16000/25000/26000 Series Platforms

NetScaler SDX 14000, 15000,16000, 25000 and 26000 series of platforms support RAID managed by the software. Multiple disks provide not only performance gains, but also enhanced reliability. Reliability is especially important for a NetScaler SDX appliance, because the appliance hosts a large numb...

[SECURITY] Fedora 25 Update: glibc-2.24-3.fc25

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

CVE-2016-4069

Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...

UBUNTU-CVE-2016-4069

Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...

CVE-2016-4069

Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...

CVE-2016-4069

Roundcube Webmail is affected by CVE-2016-4069 (CSRF) in versions before 1.1.5. The vulnerability allows remote attackers to hijack user authentication for requests that download attachments, leading to a denial of service (disk consumption) via unspecified vectors. The available documents do not...

How disk space /var is allocated for VPX provisioned on SDX

The objective of this article is to explain how the disk space is allocated for VPX provisioned on SDX appliance...

[SECURITY] Fedora 24 Update: glibc-2.23.1-10.fc24

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Academics Devise New Way to Steal Data from Air-Gapped Computers

Stealing data from air-gapped computers is one of the great exercises in computer security: advanced attackers covet what’s stored on these isolated machines, while researchers try to figure out the novel ways adversaries could jump those gaps. The latest effort doesn’t involve USBs, heat,...

Unable to Back Up Disk X: Due to Invalid Partition Table

Challenge The backup job fails with the following error: Unable to back up disk X: due to invalid partition table Cause The error is caused by a volume type with no partition table and is not supported by Veeam Agent for Microsoft Windows. In Windows Disk Management, the volume looks like a commo...

Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery

Overview Multiple Recording Hard disk products provided by I-O DATA DEVICE, INC. contain a cross-site request forgery vulnerability due to an issue in the web management screen. kaito834 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Add From Server < 3.3.2 - Cross-Site Request Forgery (CSRF)

An attacker can use this issue to add illegal content to the victims server, or add very large files to the victim's server to exhaust the amount of available disk space...

Scrapy Python Crawler: Crawlpy

Python web spider/crawler based on scrapy with support for POST/GET login, variable level of recursions/depth and optionally save to disk. Requirements python 2.7 lxml pip pip install Scrapy Features POST/GET Login prior crawling Can handle logins that requires dynamic CSRF token Variable level o...

Debian DLA-571-1 : xen security update (Bunker Buster)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-3672 XSA-180 Andrew Sorensen discovered that a HVM domain can exhaust the hosts disk space by filling up the log file. CVE-2016-3158,...

OracleVM 3.2 : xen (OVMSA-2016-0090)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/HVM: correct CPUID leaf 80000008 handling - 6c733e54 xsa173010001-x86-HVM-correct-CPUID-leaf-80000008-handl ing.patch was based on upstream commit: ef437690af8b75e6758dce77af75a22b63982883 x86/HVM...