Microsoft Windows: Require passwords for fixed data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdfixeddrives.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of passwords for fixed data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: Use of smart cards on fixed data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsmartcardsfixeddrives.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of smart cards on fixed data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Nextcloud: Missing X-Content-Type-Options

Nextcloud doesn't have a header settings for X-Content-Type Options which means it is vulnerable to MIME sniffing. The only defined value, "nosniff", prevents Internet Explorer and Google Chrome from MIME-sniffing a response away from the declared content-type. This also applies to Google Chrome...

macOS QuickLook Feature Leaks Data Despite Encrypted Drive

Researchers are cautioning macOS users that not all the data they store on their encrypted hard drive is protected. In a report published Monday, Apple security expert Patrick Wardle revealed that a macOS feature called QuickLook stores unprotected previews of images and other file types. “Apple...

Apple macOS Bug Reveals Cache of Sensitive Data from Encrypted Drives

Security researchers are warning of almost a decade old issue with one of the Apple's macOS feature which was designed for users' convenience but is potentially exposing the contents of files stored on password-protected encrypted drives. Earlier this month, security researcher Wojciech Regula fr...

Troubleshooting NetScaler Hard Disk Issues

Hard Drive errors can come in many forms and can be resolved via other ways than an RMA. Errors include not allowing access to the NetScaler via GUI to not booting completely. SSH Access Works but No GUI Access Go to shell and run command df –h the directory you’ll investigate is /var. If /var is...

Synology Drive File Sharing Notify Toast Cross-Site Scripting Vulnerability

Synology Drive is a collaboration suite from Synology that includes document management, collaboration and file synchronization and backup features.File Sharing Notify Toast is one of the file sharing components. A cross-site scripting vulnerability exists in File Sharing Notify Toast in Synology...

Synology Drive Access Control Error Vulnerability

Synology Drive is a collaboration suite from Synology that includes document management, collaboration and file synchronization and backup. An access control error vulnerability exists in Synology Drive versions prior to 1.0.2-10275. A remote attacker can exploit the vulnerability to access...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15632)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Update Storage Group" method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15633)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Storage Group" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'name' parameter...

CVE-2018-11177

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...

CVE-2018-11183

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...

CVE-2018-11165

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...

CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11158

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...

Damaging Hard Drives with an Ultrasonic Attack

Playing a sound over the speakers can cause computers to crash and possibly even physically damage the hard drive. Academic paper...

CVE-2018-8921

Cross-site scripting XSS vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...

Improper access control

Improper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote authenticated users to access non-shared files or folders via unspecified vectors...

CVE-2018-8921

Cross-site scripting XSS vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...

Cross site scripting

Cross-site scripting XSS vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...