EUVD-2019-18860

Malware in sbrugna...

CVE-2019-9486

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

CVE-2019-9486

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

Privilege escalation

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

CVE-2019-9486

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

CVE-2019-9486

STRATO HiDrive Desktop Client 5.0.1.0 for Windows is affected by a SYSTEM privilege-escalation vulnerability via the HiDriveMaintenanceService, which exposes a NetNamedPipe endpoint and allows code injection through insecure interprocess communication. The issue also affects Telekom MagentaCLOUD ...

PT-2019-19679

Name of the Vulnerable Software and Affected Versions STRATO HiDrive Desktop Client versions 5.0.1.0 Telekom MagentaCLOUD versions through 5.7.0.0 1&1 Online Storage versions through 6.1.0.0 Description The issue concerns a SYSTEM privilege escalation through the HiDriveMaintenanceService service...

CVE-2019-9486: Time-of-check Time-of-use (TOCTOU) Race Condition

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

shop.strato.de XSS vulnerability

Vulnerable URL: https://shop.strato.de/epages/62631327.sf/deDE/? Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check shop.strato.d...

STRATO Newsletter Manager Directory Traversal

No description provided by source. STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:newsletter.php.cgi Exploit:...

Strato Newsletter Manager Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...

STRATO Newsletter Manager Directory Traversal

Exploit for php platform in category web applications STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...

STRATO NewsLetter Manager - Directory Traversal

STRATO NewsLetter Manager - Directory Traversal STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...

STRATO NewsLetter Manager - Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...

Strato NumberFormatException - Validation Vulnerability

Document Title: =============== Strato NumberFormatException - Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=395 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 395...

Strato NumberFormatException - Validation Vulnerability

Document Title: =============== Strato NumberFormatException - Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=395 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 395...

Strato FAQ Center 2012 - Cross Site Scripting Vulnerability

Document Title: =============== Strato FAQ Center 2012 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=372 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

Strato FAQ Center 2012 - Cross Site Scripting Vulnerability

Document Title: =============== Strato FAQ Center 2012 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=372 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

Strato Server ACP - Persistent DOM XSS Vulnerabilities

Document Title: =============== Strato Server ACP - Persistent DOM XSS Vulnerabilities Release Date: ============= 2011-08-24 Vulnerability Laboratory ID VL-ID: ==================================== 141 Product & Service Introduction: =============================== Control Panel of Strato Hosting...

Strato Server ACP - Persistent DOM XSS Vulnerabilities

Document Title: =============== Strato Server ACP - Persistent DOM XSS Vulnerabilities Release Date: ============= 2011-08-24 Vulnerability Laboratory ID VL-ID: ==================================== 141 Product & Service Introduction: =============================== Control Panel of Strato Hosting...