938 matches found
Business Email Compromise Campaign Harvesting Credentials in Numerous Industries
A business email compromise campaign emanating out of Western Africa is targeting companies in a wide swathe of industries, bucking a trend of these scams focusing on wire fraud and targeting CEOs. The criminals are using phishing emails with links redirecting victims to sites designed to harvest...
Western Digital MyCloud multi_uploadify File Upload Vulnerability
This module exploits a file upload vulnerability found in Western Digital's MyCloud NAS web administration HTTP service. The /web/jquery/uploader/multiuploadify.php PHP script provides multipart upload functionality that is accessible without authentication and can be used to place a file anywher...
shop.westernbulldogs.com.au XSS vulnerability
Vulnerable URL: http://shop.westernbulldogs.com.au/headwear/46".shtml Details: Description| Value ---|--- Patched:| Yes, at 06.11.2017 Latest check for patch:| 06.11.2017 13:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
putlocker.is XSS vulnerability
Vulnerable URL: http://putlocker.is/search/advancedsearch.php?q=1=1"--!"=western=0from=yearto=yearsearch==1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13969 VIP website status:...
Threat Outbreak Alert RuleID28880: Email Messages Distributing Malicious Software on April 26, 2017
Medium Alert ID: 53573 First Published: 2017 April 26 14:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28880 may contain the following files: Name | Si...
Western Digital My Cloud Authentication Vulnerability
Western Digital MyCloud is a personal cloud storage device. An authentication vulnerability exists in Western Digital MyCloud. An unauthenticated attacker could be allowed to exploit this vulnerability to bypass administrator authentication and gain control of device privileges...
Western Digital My Cloud 2.21.126 Authentication Bypass
------------------------------------------------------------------------ Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privileges ------------------------------------------------------------------------ Remco Vermeulen, April 2017...
Western Digital My Cloud Cross Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications ------------------------------------------------------------------------ Western Digital My Cloud vulnerable to Cross-Site Request Forgery vulnerability ------------------------------------------------------------------------ Remco...
Western Digital My Cloud Command Injection Vulnerability
Exploit for hardware platform in category web applications ------------------------------------------------------------------------ Western Digital My Cloud vulnerable to multiple command injection vulnerabilities ------------------------------------------------------------------------ Remco...
Unpatched Western Digital Bugs Leave NAS Boxes Open to Attack
Western Digital Corporation network-attached storage owners were warned of critical flaws in the company’s My Cloud line of hardware that exposed data stored on the devices to attack. The flaws impact a dozen Western Digital drives that could allow remote adversaries to bypass logins, insert...
Western Digital My Cloud Command Injection / File Upload
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated OS command injection & arbitrary file upload product: Western Digital My Cloud vulnerable version: at least: 2.21.126 My Cloud, 2.11.157My Cloud EX2,...
Western Digital My Cloud Buffer Overflow
------------------------------------------------------------------------ Stack-based buffer overflow in Western Digital My Cloud allows for remote code execution ------------------------------------------------------------------------ Remco Vermeulen, January 2017...
Western Digital My Cloud 2.21.119 Authentication Bypass
------------------------------------------------------------------------ Authentication bypass vulnerability in Western Digital My Cloud ------------------------------------------------------------------------ Remco Vermeulen, Januari 2017...
Western Digital MyCloud NAS Remote Command Injection Vulnerability
Western Digital MyCloud NAS is a personal cloud storage device. Western Digital MyCloud NAS version 2.11.142 suffers from a remote command injection vulnerability in /web/googleanalytics.php, which allows an attacker to execute arbitrary commands with root privileges via the arg parameter within...
Western Digital MyCloud NAS Remote Command Injection Vulnerability (CNVD-2017-00115)
Western Digital MyCloud NAS is a personal cloud storage device. Western Digital MyCloud NAS version 2.11.142 has a remote command injection vulnerability in index.php, which allows an attacker to execute arbitrary commands with root privileges via a cookie header...
Western Digital My Cloud / WD Cloud Products Detection (HTTP)
HTTP based detection of Western Digital My Cloud products Called SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-10108
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/googleanalytics.php URL via a modified arg parameter in the POST data...
Command injection
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header...
