423 matches found
Microsoft OneDrive for Mac suffers from dll hijacking vulnerability
Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...
Microsoft OneDrive for Mac suffers from dll hijacking vulnerability (CNVD-2021-05386)
Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...
Microsoft OneDrive suffers from dll hijacking vulnerability
OneDrive is Microsoft's new generation of network storage tools, renamed from SkyDrive.OeDrive's versions span multiple endpoints, including web, mobile, and PC. Microsoft OneDrive has a dll hijacking vulnerability that can be exploited by attackers to remotely control a user's computer or implan...
Microsoft OneDrive suffers from a DLL hijacking vulnerability (CNVD-2021-03304)
OneDrive is Microsoft's next-generation network storage tool, renamed from SkyDrive.OeDrive's versions span multiple endpoints, web, mobile, and PC. Microsoft OneDrive has a DLL hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan...
Security update for rclone (moderate)
openSUSE Security Update: Security update for rclone Announcement ID: openSUSE-SU-2020:2168-1 Rating: moderate References: 1179005 Cross-References: CVE-2020-28924 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update fo...
Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign
A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe, using a strain of a 13-year old backdoor trojan named Bandook. According to Check Point Research, Bandook was last spotted being used in 2015 and 2017/2018, in the “Operation Manul” and “Dark Caracal”...
openSUSE Security Update : rclone (openSUSE-2020-2035)
This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...
openSUSE Security Update : rclone (openSUSE-2020-2008)
This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...
Security update for rclone (moderate)
openSUSE Security Update: Security update for rclone Announcement ID: openSUSE-SU-2020:2035-1 Rating: moderate References: 1179005 Cross-References: CVE-2020-28924 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for rclone...
Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks
Microsoft has suspended 18 Azure Active Directory applications that were being leveraged for command-and-control C2 infrastructure by what it says is a Chinese nation-state actor. While Microsoft services like Azure Active Directory AD – its cloud-based identity and access management service – ar...
The vulnerability of the OneDrive for Windows file sharing service, related to the improper handling of symbolic links, allows a hacker to escalate their privileges.
The vulnerability of the OneDrive for Windows file sharing service is related to the improper handling of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...
The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.
The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Online-only files in OneDrive folder not backed up by Veeam Agent for Microsoft Windows
Challenge A restore point created by Veeam Agent for Microsoft Windows appears to be missing files from a user's OneDrive folder. Upon further investigation, it is determined that Files On-Demand was enabled, and the missing files were in an Online-only state at the time of backup. Cause As a...
CVE-2020-16853
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
CVE-2020-16851
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
CVE-2020-16852
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Privilege escalation
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Privilege escalation
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Privilege escalation
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
