9796 matches found
Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity
CVE-2020-11932 :bug::mag: Check CVE-2020-11932 and test for h...
Western Digital WD Discovery Cross-Site Request Forgery Vulnerability
Western Digital MyCloud Home is a personal storage device from Western Digital.Western Digital WD Discovery is a remote connectivity management tool for Western Digital personal storage devices. A cross-site request forgery vulnerability exists in Western Digital WD Discovery versions prior to...
CVE-2020-12427
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
CVE-2020-12427
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
Cross site request forgery (csrf)
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
CVE-2020-12427
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
Failed to call RPC function: Error code: 0x80131500
Challenge Backup of Remote Desktop Server VMs with Application-Aware Processing may fail with an Unknown error, error code 0x80131500. You will see error messages similar to: "Failed to call RPC function 'Vss.GetSqlInfoForLastSnapshot2': Error code: 0x80131500. Failed to invoke func...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-12427: Cross-Site Request Forgery (CSRF)
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
PT-2020-13108
Name of the Vulnerable Software and Affected Versions Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to significant impacts such as stealing data, modifying disk...
UBUNTU-CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
PT-2020-12930
Name of the Vulnerable Software and Affected Versions Ubuntu Server versions prior to Subiquity 20.05.2 Description A security issue was discovered in the Subiquity installer for Ubuntu Server, where the LUKS full disk encryption password was logged if one was entered. This issue was caused by th...
7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years
A cybersecurity researcher today uncovers a set of 7 new unpatchable hardware vulnerabilities that affect all desktops and laptops sold in the past 9 years with Thunderbolt, or Thunderbolt-compatible USB-C ports. Collectively dubbed 'ThunderSpy,' the vulnerabilities can be exploited in 9 realisti...
Remote Command Execution Vulnerability in Hard Disk Recorder of Zhejiang YUV Technology Co.
Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. Zhejiang YUVE Technology Co., Ltd. hard disk recorders exist remote command execution vulnerability, an attacker can use the vulnerability to execute system...
PT-2020-4630 · Php +8 · Php +8
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.30 PHP versions 7.3.x through 7.3.17 PHP versions 7.4.x through 7.4.5 Description: The issue is related to an integer overflow buffer in the PHP language interpreter. Exploitation of this issue could allow a...
Service Tracing Privilege Escalation Exploit
This Metasploit module leverages a trusted file overwrite with a dll hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...
Tecnick.com TCExam Path Traversal Vulnerability
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A path traversal vulnerability exists in Tecnick.com TCExam version 14.2.2, which can be exploited by a remote attacker to read the contents of an arbitrary file ...
Kubernetes: Node disk DOS by writing to container /etc/hosts
Report Submission Form Summary: Pod files /etc/hosts, /etc/hostname, /etc/resolve.conf are not readonly. A normal pod running in kubernetes cluster can kil a host through write data to /etc/hosts. Not only /etc/hosts, but also /etc/resolve.conf and /etc/hostname can do this. Kubernetes Version:...