September Patch Tuesday – 79 Vulns, 17 Critical, Remote Desktop Client, SharePoint, Exploited PrivEsc

This month’s Microsoft Patch Tuesday addresses 79 vulnerabilities with 17 of them labeled as Critical. Of the 17 Critical vulns, 8 are for scripting engines and browsers, 4 are for the Remote Desktop Client, and 3 are for SharePoint. In addition, Microsoft has again patched a critical vulnerabili...

Remote Desktop Client Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs;...

Remote Desktop Client Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs;...

Microsoft Windows Remote Desktop Client Remote Code Execution Vulnerability (CNVD-2019-37189)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Remote Desktop Client is one of the Windows remote desktop client programs. A remo...

PT-2019-3353

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2019-3173

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2019-3174

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2019-3354

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

KLA11552 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of...

Nextcloud: Clear text storage of proxy parameters and passwords

Proxy settings of the Nextcloud desktop client were not stored in a save way, instead they where just base64 encoded stored in the nextcloud.cfg file...

Nextcloud: XSS in desktop client via invalid server address on login form

Team! I have found this vulnerability that in my time would be called "cross zone" but at the moment I don't know. The problem is found in the latest version of "nextcloud.exe" for your windows version. The problem occurs with the initial screen where you ask to connect to a website. Apparently...

Mail.ru: Code Injection in macOS Desktop Client

DYLD Environment Variables were not disabled In MacOS desktop ICQ client. Disabling DYLD Environment Variables is BCP for MacOS application to prevent code injection vector into local process...

CVE-2018-17170

Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

Code injection

Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2018-17170

Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2018-17170

Grouptime Teamwire Desktop Client for Windows (version 1.5.1 before 1.9.0) is affected by a template-based code injection vulnerability that can lead to remote code execution. The issue affects all backend versions prior to prod-2018-11-13-15-00-42. Exploitation details are not provided in the su...

PT-2019-9403

Name of the Vulnerable Software and Affected Versions Grouptime Teamwire Desktop Client versions 1.5.1 through 1.9.0 Grouptime Teamwire backend versions prior to prod-2018-11-13-15-00-42 Description The issue allows code injection via a template, leading to remote code execution. Recommendations...

CVE-2018-17170: Improper Control of Generation of Code

Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2019-9486

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...

Privilege escalation

STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject...