Worldwide 2021 Email Phishing Statistics & Examples

Explore the need for going beyond built-in Microsoft 365 and Google Workspace security based on email threats detected in 2021...

SRC-2022-0016 : VMware Workspace ONE Access ntpServer.hzn Privilege Escalation Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workspace ONE Access. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

SRC-2022-0015 : VMware Workspace ONE Access ApplicationSetupController dbTestConnection JDBC Injection Remote Code Execution Vulnerability (patch bypass)

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware Workspace ONE Access. Although authentication is required to exploit this vulnerability. The specific flaw exists within ApplicationSetupController class. The issue...

CVE-2022-23745 - Memory corruption issue in Capsule Workspace on Android mobile devices

Symptoms A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information. This issue was discovered and responsibly disclosed by Gabe Flawedworld and received ...

Malicious Package

Overview workspace-hoist-all is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Alt + PrtSc shortcut not working when using KeyboardEventMode = Unicode with a Japanese keyboard

In Citrix Workspace App for Linux, when using Unicode keyboard event mode with a Japanese keyboard, the Alt + PrtSc combination/shortcut does not work...

MAL-2022-7060 Malicious code in wdl-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c409a88473b42caf34d71b72422cf60aab91588e465d40f54f2523b1136f4554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdl-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c409a88473b42caf34d71b72422cf60aab91588e465d40f54f2523b1136f4554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workspace-hoist-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e591793f57ce0827e5e1fe1fa294727de96ea3ef4263ed9171550a534d6be47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CWA 1912 CU4 : USB component fails during installation

Citrix workspace is packaged and installation command is added - CitrixWorkspaceAppweb.exe" /SILENT /Noreboot ADDLOCAL="ReceiverInside,ICAClient,DesktopViewer,Flash,Vd3d,SSON,USB,AM,SELFSERVICE" /INCLUDESSON ENABLESSON=Yes DONOTSTARTCC=1 /ENABLECEIP=False ALLOWADDSTORE=Y...

Siemens Teamcenter Active Workspace跨站脚本漏洞

Teamcenter Active Workspace is a web application for accessing the Teamcenter system, providing the same and seamless experience on any computer or smart device.A cross-site scripting vulnerability exists in Siemens Teamcenter Active Workspace, which can be exploited by attackers to execute...

CVE-2022-32145

A vulnerability has been identified in Teamcenter Active Workspace V5.2 All versions V5.2.9, Teamcenter Active Workspace V6.0 All versions V6.0.3. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute...

CVE-2022-32145

A vulnerability has been identified in Teamcenter Active Workspace V5.2 All versions V5.2.9, Teamcenter Active Workspace V6.0 All versions V6.0.3. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute...

Cross site scripting

A vulnerability has been identified in Teamcenter Active Workspace V5.2 All versions V5.2.9, Teamcenter Active Workspace V6.0 All versions V6.0.3. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute...

CVE-2022-32145

A vulnerability has been identified in Teamcenter Active Workspace V5.2 All versions V5.2.9, Teamcenter Active Workspace V6.0 All versions V6.0.3. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute...

CVE-2022-32145

CVE-2022-32145 affects Siemens Teamcenter Active Workspace V5.2 (pre-5.2.9) and V6.0 (pre-6.0.3). The vulnerability is a reflected cross-site scripting (XSS) flaw in the web interface that could allow an attacker to execute malicious code by baiting a user with a malicious link. Root cause: impro...

PT-2022-21117

Name of the Vulnerable Software and Affected Versions Teamcenter Active Workspace versions prior to 5.2.9 Teamcenter Active Workspace versions prior to 6.0.3 Description A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an...

Siemens Teamcenter Active Workspace Cross-site Scripting Vulnerability

Teamcenter Active Workspace is a web application for accessing the Teamcenter system, providing the same and seamless experience on any computer or smart device.A cross-site scripting vulnerability exists in Siemens Teamcenter Active Workspace, which can be exploited by attackers to execute...

CVE-2022-32145: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Teamcenter Active Workspace V5.2 All versions V5.2.9, Teamcenter Active Workspace V6.0 All versions V6.0.3. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute...

Samsung mobile PersonaManagerService authorization issue vulnerability

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile PersonaManagerService is vulnerable to an authorization issue that stems from improper permission management in addAppPackageNameToAllowList, which can be exploited by local attackers to A local attacker can use the...