Slack: Stored XSS in files.slack.com

We want to once again thank researcher @oskarsv for informing us of this issue. In the original submission that we previously disclosed here: https://hackerone.com/reports/783877, Oskarsv detailed a remote code execution vulnerability that hinged on the functionality of Slack’s “Posts” feature...

Nextcloud Desktop Client Code Injection Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A code injection vulnerability exists in version 2.6.2 of Nextcloud Desktop Client for macOS-based platforms, which can be exploited by an attacker to load...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

Code injection

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

CVE-2020-8140 affects Nextcloud Desktop Client for macOS (version 2.6.2). A code injection flaw arises when DYLD_INSERT_LIBRARIES is set in the environment, allowing loading of arbitrary code at startup and enabling code execution in the Nextcloud process. The vulnerability is demonstrated in mul...

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708, a vulnerability in the Windows Remote Desktop Client. The target product/service is Windows Remote Desktop Client, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the poc.py script, which is invoked by...

Nextcloud: XSS in PDF Viewer

An outdated version of PDF.js in use allows for the CVE-2018-5158 vulnerability. When the payload PDF is shown in the supplied PDF viewer, it can execute arbitrary JavaScript. I have tested the payload PDF, and it is working in the Safari 13.0.5 the latest version and Firefox 74.0 the latest...

The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is associated with insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to a remote malicious server...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Command Execution Vulnerability in Ant Notes Desktop Client

Ant Notes Desktop Client is a personal favorite open source note taking software. Ant Notes Desktop Client has a command execution vulnerability that can be exploited by an attacker to gain server privileges...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Microsoft Windows Remote Desktop Client Remote Code Execution Vulnerability (CNVD-2020-16836)

Microsoft Remote Desktop Client is a remote desktop client. A remote code execution vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to execute arbitrary code on a computer connected to the client...

Microsoft Windows Remote Desktop Client Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A code execution vulnerability exists in Microsoft Windows Remote Desktop Client, which ca...

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...