Code injection

The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle MiTM attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the...

CVE-2018-8569

A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop Application Remote Code Execution Vulnerability." This affects Yammer Desktop App...

CVE-2018-8569

CVE-2018-8569 is a remote code execution vulnerability affecting Yammer Desktop. The issue arises from the loading of arbitrary content in the desktop application, enabling an attacker to run code in the user’s context if the victim is enticed to visit attacker-controlled content via a specially ...

Microsoft Yammer Desktop Application Remote Code Execution Vulnerability

Microsoft Yammer Desktop Application is a social networking service for businesses from Microsoft USA. A remote code execution vulnerability exists in Microsoft Yammer Desktop Application. A remote attacker can exploit this vulnerability to run arbitrary code in the context of the current user...

Unspecified Vulnerability in NoMachine App for Android

NoMachine App for Android is a remote desktop application for the Android platform from NoMachine Luxembourg. A security vulnerability exists in NoMachine App for Android. An attacker can exploit the vulnerability to modify environment variables...

Microsoft people 10.1807.2131.0 - Denial of service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service PoC Exploit Author : L0RD Contact: email protected Vendor Homepage : https://www.microsoft.com Software link:...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12829

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Input validation

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12829

Adobe Creative Cloud Desktop Application prior to version 4.6.1 contains an improper certificate validation vulnerability that could lead to privilege escalation. Affected product: Adobe Creative Cloud Desktop Application (Windows/macOS) with 4.6.0 and earlier. Root cause: improper certificate va...

CVE-2018-5003

Adobe Creative Cloud Desktop Application installer (Windows) prior to version 4.5.5.342 is affected by an insecure library loading (DLL hijacking) vulnerability (CVE-2018-5003). The root cause is DLL loading during installation, enabling privilege escalation if an attacker can place a malicious l...

Adobe Creative Cloud Desktop Application Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Member Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography a...

APSB18-32 Security update available for the Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows and macOS. This update resolves an important vulnerability CVE-2018-12829 that could lead to privilege escalation...

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

APSB18-20 Security update available for the Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation CVE-2018-5003...

Yosoro Cross-Site Scripting Vulnerability

Yosoro is a desktop application for synchronizing the contents of your hard drive in the cloud. A cross-site scripting vulnerability exists in Yosoro version 1.0.4. A remote attacker can exploit this vulnerability to execute arbitrary code...

CVE-2018-4992

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...