Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks. "Starting from a single compromised machine, threat actors could...

Citrix Workspace App for Windows - Shortcut or Hotkey redirection

CWA Windows provides 2 approaches to configure the hotkey redirection: Storefront configuration and client side configuration...

GitLens Git Local Configuration Exec

GitKraken GitLens before v.14.0.0 allows an untrusted workspace to execute git commands. A repo may include its own .git folder including a malicious config file to execute arbitrary code. Tested against VSCode 1.87.2 with GitLens 13.6.0 on Ubuntu 22.04 and Windows 10 Module Options msf use...

VulnCheck KEV: CVE-2022-31656

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate...

Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workspaces-install-already-exists (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bdda2d22ec10a2cb91f9d1d76dda780fbb0f7a5f70e35ecdb86daed289bd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8445 Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The taskbar is stop responding when launching a published desktop in Citrix Workspace app

In a double-hop configuration, when launching a published application using Citrix Workspace App on the 1st-hop published desktop, the taskbar might stop responding on the 1st-hop published desktop VDA...

The vulnerability of the Unified Management Console for VMware Workspace ONE UEM endpoints involves redirecting URLs to an unreliable website, allowing attackers to escalate their privileges.

The vulnerability of the Unified Management Console for VMware Workspace ONE UEM involves redirecting the URL to an unreliable website. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-20886

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user...

CVE-2023-20886

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user...

Open redirect

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user...

CVE-2023-20886

CVE-2023-20886 concerns the VMware Workspace ONE UEM console open redirect. Affected: Workspace ONE UEM console versions prior to 22.3.0.48 (and other listed train versions: 22.6.0.36, 22.9.0.29, 22.12.0.20, 23.2.0.10). Root cause: open redirect that can funnel a user to attacker-controlled pages...

CVE-2023-20886

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user...

CVE-2023-20886

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user...

CVE-2023-46248

Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...

Remote code execution

Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...

PT-2023-6684 · Vmware · Vmware Workspace One Uem

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE UEM affected versions not specified Description: The issue is related to an open redirect vulnerability in the VMware Workspace ONE UEM console. This vulnerability can be exploited by a malicious actor to redirect a victi...

エラー番号 2306 が発生し、セッションの起動に失敗します

セッションの起動時にエラー番号 2306 が発生し、起動に失敗する場合があります。 エラーメッセージ： Citrix Workspace Configuration Manager: XXXXX.ica という名前のファイルが見つかりませんでした。インストールを確認するか、管理者に連絡してください。...

VMware Workspace ONE Input Validation Error Vulnerability

VMware Vmware Workspace One is a platform from VMware that supports cross-device applications for rapid delivery and management of applications. The platform, which includes VMware Horizon and VMware Horizon Cloud, integrates access control, application management, and multi-platform endpoint...