Patrick Hof News Today

A suite of new studies unveils a detailed look of the brain and what it's made of — a leap towards understanding brain diseases.

Advisory: Session Token Enumeration in RWS WorldServerSession tokens in RWS WorldServer have a low entropy and can beenumerated, leading to unauthorised access to user sessions.Details=======Product: WorldServerAffected Versions: 11.7.3 and earlier versionsFixed Version: 11.8.0Vulnerability Type: Session Token EnumerationSecurity Risk: highVendor URL: https://www.rws.com/localization/products/additional-solutions/Vendor Status: fixed version releasedAdvisory URL: https://www.redteam-pentesting.d...

Advisory: STARFACE: Authentication with Password Hash PossibleRedTeam Pentesting discovered that the web interface of STARFACE as wellas its REST API allows authentication using the SHA512 hash of thepassword instead of the cleartext password. While storing passwordhashes instead of cleartext passwords in an application's databasegenerally has become best practice to protect users' passwords in caseof a

Advisory: Pydio Cells: Cross-Site Scripting via File DownloadPydio Cells implements the download of files using presigned URLs whichare generated using the Amazon AWS SDK for JavaScript [1]. The secretsused to sign these URLs are hardcoded and exposed through the JavaScriptfiles of the web application. Therefore, it is possible to generatevalid signatures for arbitrary download URLs.

Advisory: Pydio Cells: Unauthorised Role AssignmentsPydio Cells allows users by default to create so-called external usersin order to share files with them. By modifying the HTTP request sentwhen creating such an external user, it is possible to assign the newuser arbitrary roles. By assigning all roles to a newly created user, access toall cells and

For longer running processes, Pydio Cells allows for the creation ofjobs, which are run in the background. The job "remote-download" can beused to cause the backend to send a HTTP GET request to a specified URLand save the response to a new file. The response file is then availablein a user-specified folder in Pydio Cells.Details=======Product:

How can we make sense of the biggest brains on the planet?

NEW YORK – A collaboration between researchers at Columbia and the Icahn School of Medicine is embarking on a project that will generate comprehensive atlases of entire human brains and all their 180+ billion cells. This kind of data can help uncover