EUVD-2017-2792

Malware in sbrugna...

EUVD-2015-2939

Malware in sbrugna...

EUVD-2017-2793

Malware in sbrugna...

CVE-2017-11158

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

CVE-2017-11158

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

CVE-2017-11158

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

Synology Cloud Station Backup for Windows Untrusted Search Path Vulnerability

Synology Cloud Station Backup for Windows is a Windows-based application for backing up computer data from Synology. An untrusted search path vulnerability exists in the installer of Synology Cloud Station Backup for Windows-based platforms prior to version 4.2.5-4396. A local attacker can exploi...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in t...

CVE-2017-11157

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in t...

CVE-2017-11157

Synology Cloud Station Backup for Windows before version 4.2.5-4396 is affected by an untrusted search path vulnerability in its installer. A local attacker can exploit this by placing malicious files (shfolder.dll, ntmarta.dll, secur32.dll, or dwmapi.dll) in the current working directory to achi...

Synology Cloud Station Elevation of Privilege Vulnerability

Synology Cloud Station is a solution for synchronizing data between all devices using a cloud station. A security vulnerability in the clientchown tool in the Synology Cloud Station's synchronization client client for OS X-based platforms allows a local attacker to change the ownership of arbitra...

CVE-2015-2851

clientchown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename...

Code injection

clientchown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename...

CVE-2015-2851

The CVE-2015-2851 issue affects Synology Cloud Station sync client on macOS, specifically versions 1.1-2291 through 3.1-3320. A setuid root executable, client_chown, allows local users to alter file ownership by supplying a filename, enabling escalation to root privileges. Impact is local and pro...

Synology Cloud Station sync client for OS X allows regular users to claim ownership of system files

Overview The Synology Cloud Station sync client for OS X contains a setuid root executable that allows regular users to claim ownership of system files. Description CWE-276: Incorrect Default Permissions - CVE-2015-2851The Synology Cloud Station sync client for OS X contains an executable named...