CVE-2020-8347

Lenovo Enterprise Network Disk is affected by a reflective XSS vulnerability (CVE-2020-8347) present in versions prior to 6.1 patch 6 hotfix 4. An attacker could lure an authenticated user to visit a crafted URL and execute code in the user’s browser, potentially via phishing. The primary impact ...

CVE-2020-8347

A reflective cross-site scripting XSS vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafted url is visited, possibly through phishing...

CVE-2020-8348: Improper Neutralization of Input During Web Page Generation

A DOM-based cross-site scripting XSS vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited, possibly through phishing...

PT-2020-20114

Name of the Vulnerable Software and Affected Versions Lenovo Enterprise Network Disk versions prior to 6.1 patch 6 hotfix 4 Description A reflective cross-site scripting issue was reported that could allow code execution in an authenticated user's browser if a crafted URL is visited, possibly...

CVE-2020-8347: Improper Neutralization of Input During Web Page Generation

A reflective cross-site scripting XSS vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafted url is visited, possibly through phishing...

PT-2020-20115

Name of the Vulnerable Software and Affected Versions Lenovo Enterprise Network Disk versions prior to 6.1 patch 6 hotfix 4 Description A DOM-based cross-site scripting issue was reported that could allow execution of code in an authenticated user's current browser session if a crafted URL is...

UBUNTU-CVE-2018-6085

Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

Sky classroom file upload vulnerability-vulnerability warning-the black bar safety net

Brief description: Allow the upload of dangerous file type,this system is still a lot of Open the network course website, as shown in Figure, landing it, and now SkyDrive. Upload a PHP file, the web site didn't filter PHP file. ! 1 8-300x166. png ! 1 8-300x166. png ! 1 8-300x166. png After enteri...

PHPDrive privilege elevation vulnerability and the Fix-vulnerability warning-the black bar safety net

PHPDrive is set to run in the PHP environment file management system, can be applied to a network disk, enterprise document management, schools, team management, software, file, CMS, etc. includes/user.lib.php Row 8 7 function getip ifisset$SERVER"HTTPXFORWARDEDFOR"&&$SERVER"HTTPXFORWARDEDFOR" $i...

OpenAFS filesystem privilege esccalation

Attacke can make fake suid binary on network disk by using protocol weakness...

CVE-2002-0901: Undefined Security Weakness

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...

Проблема в SSH с Kerberos

При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...