Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.3.109 that stems from...

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

CVE-2024-40404

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 are susceptible to an access control issue within the API endpoint used to establish Web Sockets connections. This vulnerability allows for unauthorized access due to improper control mechanisms at the connection endpoint. To mitig...

CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

CVE-2024-40405

An incorrect access control vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.3.109 . This flaw allows an attacker to gain unauthorized access to a secondary broker by sending a crafted request . The vulnerability has been identified in several databases, includi...

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

PT-2024-28831

Name of the Vulnerable Software and Affected Versions Cybele Software Thinfinity Workspace versions prior to 7.0.3.109 Description The issue is related to incorrect access control, allowing attackers to gain access to a secondary broker via a crafted request. This can potentially lead to...

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

CVE-2024-40408

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 contain an access control issue within the Create Profile section. This vulnerability allows an attacker to create arbitrary user profiles with elevated privileges , potentially leading to unauthorized access. To remediate this, us...

Thinfinity VirtualUI 2.5.41.0 IFRAME Injection

Exploit Title: Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection Date: 16/12/2021 Exploit Author: Daniel Morales Vendor: https://www.cybelesoft.com Software Link: https://www.cybelesoft.com/thinfinity/virtualui/ Version: Thinfinity VirtualUI " where "vpath=//" is the pointer to the external site t...

Cybele Software Thinfinity VirtualUI 安全漏洞

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI versions...

Cybele Software Thinfinity VirtualUI授权问题漏洞

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software, Inc. that supports embedding remote Windows applications into standard web applications to allow two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI, which...

Cybele Software Thinfinity VirtualUI Cross-Site Scripting Vulnerability

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A cross-site scripting vulnerability exists in Cybele Software Thinfinity VirtualUI...

Cybele Software Thinfinity VirtualUI Path Traversal Vulnerability

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A path traversal vulnerability exists in Cybele Software Thinfinity VirtualUI versi...

Cybele Software Thinfinity Remote Desktop Workstation Directory Traversal Vulnerability

Cybele Software Thinfinity Remote Desktop Workstation is a browser-based remote desktop tool from Cybele Software, USA. A directory traversal vulnerability exists in Cybele Software Thinfinity Remote Desktop Workstation version 3.0.0.3 32-bit and 64-bit. A remote attacker can exploit this...

Directory traversal

Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows remote attackers to download arbitrary files via a .. dot dot in an unspecified parameter...

CVE-2015-1429

Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows remote attackers to download arbitrary files via a .. dot dot in an unspecified parameter...

CVE-2015-1429

CVE-2015-1429 affects Cybele Software Thinfinity Remote Desktop Workstation (version 3.0.0.3, 32-bit and 64-bit). A directory traversal vulnerability exists where a remote attacker can download arbitrary files via a .. (dot dot) in an unspecified parameter. Multiple trusted sources (CNVD-2017-308...