PT-2018-13224

Name of the Vulnerable Software and Affected Versions Ubisoft Uplay Desktop Client version 63.0.5699.0 Description The issue is related to the processing of URI handlers in the upc.exe component. It results from the lack of proper validation of a user-supplied string before using it to execute a...

Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2018-0739)

Summary Aspera High-Speed Transfer Server formerly known as Enterprise Server and Connect Server, High-Speed Transfer Endpoint formerly known as Point-to-Point Client and Desktop Client application have addressed the following openSSL vulnerabilities. Vulnerability Details CVEID: CVE-2018-0739...

Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2017-3738)

Summary Aspera High-Speed Transfer Server formerly known as Enterprise Server and Connect Server, High-Speed Transfer Endpoint formerly known as Point-to-Point Client and Desktop Client application have addressed the following openSSL vulnerabilities. Vulnerability Details CVEID: CVE-2017-3738...

CVE-2018-16261

In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust...

CVE-2018-16261: Improper Certificate Validation

In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust...

PT-2018-13456

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse Desktop Client versions 5.3RX before 5.3R5 Pulse Secure Pulse Desktop Client version 9.0R1 Description The issue is related to a Privilege Escalation Vulnerability with Dynamic Certificate Trust. Recommendations For Pulse...

Security Bulletin: TLS padding vulnerability affects IBM Rational RequisitePro (CVE-2014-8730)

Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects IBM Rational RequisitePro. Vulnerability Details CVE-ID: CVE-2014-8730 Description: IBM Rational RequisitePro could allow a remote attacker to obtain sensitiv...

Privilege escalation

Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...

uTorrent Users Warned of Remote Code Execution Vulnerability

Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...

CVE-2017-14586

Summary: CVE-2017-14586 affects Hipchat for Mac desktop client versions 4.0 up to 4.29.x. The vulnerability arises from how video call links are parsed, enabling client-side remote code execution. The issue is documented as affecting 4.0–

[SECURITY] Fedora 25 Update: remmina-1.2.0-0.39.20170724git0387ee0.fc25

Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...

Mail.ru: Gain access to random information via group chat "about" property

Vulnerability based on unfiltered size of data in "about" field. In case when data length stored in "about" field is more than 2^16 for example payload is 65537"A" server will return payload with additional suffix with random information. The size of suffix is increase with size of payload...

PostgreSQL Administration Tool pgAdmin 4 XSS vulnerabilities found and use-vulnerability and early warning-the black bar safety net

This article I'm going to tell you how I find and use pgAdmin4 desktop clientXSSvulnerabilities. In reading this article, please upgrade as soon as possible to 1. 4 version. Foreword Since I am a hand inadvertently to a new MacBookPro on that big ridiculously Touchpad, pgAdmin 4 page constantly...

CVE-2016-7614

An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors...

ownCloud: HTML injection in Desktop Client

Problem There are HTML injections throughout the ownCloud desktop client. A good example of this can be seen in accountsettings.cpp line 641 to 705. For reference purposes this is a trimmed down and slightly commented version of the code: cpp void AccountSettings::refreshSelectiveSyncStatus QStri...

WS-2017-3791

HTML injection vulnerability in all versions of ownCloud desktop client...

Microsoft Remote Desktop Client For Mac 8.0.36 Remote Code Execution

Advisory ID: SGMA16-004 Title: Microsoft Remote Desktop Client for Mac Remote Code Execution Product: Microsoft Remote Desktop Client for Mac Version: 8.0.36 and probably prior Vendor: www.microsoft.com Type: Arbitrary file read/write leads to RCE Risk level: 4 / 5 Credit:...

Apple iCloud Desktop Client 5.2.1.0 - Local Credentials Disclosure

Apple iCloud Desktop Client 5.2.1.0 - Local Credentials Disclosure Apple iCloud Desktop Client v5.2.1.0 Local Credentials Disclosure After Sign Out Exploit Tested on Windows Windows 7 64bit, English Vendor Homepage @ https://www.apple.com/ Product Homepage @ https://support.apple.com/en-us/HT2042...

Apple iCloud Desktop Client 5.2.1.0 - Local Credentials Disclosure

Apple iCloud Desktop Client v5.2.1.0 Local Credentials Disclosure After Sign Out Exploit Tested on Windows Windows 7 64bit, English Vendor Homepage @ https://www.apple.com/ Product Homepage @ https://support.apple.com/en-us/HT204283 Date 07/09/2016 Bug Discovery by: Yakir Wizman...

Dropbox Desktop Client 9.4.49 (x64) - Local Credentials Disclosure

Dropbox Desktop Client v9.4.49 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://www.dropbox.com Date 06/09/2016 Bug Discovery by: Yakir Wizman https://www.linkedin.com/in/yakirwizman http://www.black-rose.ml Viktor Minin...