Nextcloud: XSS in Desktop Client via user status and information

Summary: The Nextcloud Desktop Client application does not properly neutralize the Full Name and Status Message of users before using them. Steps To Reproduce: Server Machine: 1. Install the Nextcloud Server application 2. Log into your account 3. Navigate to your profile page 4. Set the Full Nam...

Nextcloud: Desktop client does not verify received singed certificate in end to end encryption

Vulnerability description not provided...

Nextcloud: XSS in Desktop Client in the notifications

Summary: The Nextcloud Desktop Client application does not properly neutralize the names of files before using them. Steps To Reproduce: Server Machine 1. Install the Nextcloud Server application 2. Log into your account Client Machine 3. Install the Nextcloud Desktop Client application onto a...

Microsoft Graphics Component 输入验证错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Graphics Component. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...

Security updates in Desktop Client - ownCloud

Even though there are no known vulnerabilities in the ownCloud desktop client we have updated the QT library which includes the zlib library. This is a preventive measure to make sure the client is not vlunerable to the remote code execution vulnerability in zlib...

CVE-2020-8225

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

Remote Desktop Client Multiple RCE Vulnerabilities - Windows

Remote Desktop Client and is prone to RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-22017

Remote Desktop Client Remote Code Execution Vulnerability...

Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability...

CVE-2022-22017 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2022-22017

CVE-2022-22017 is a Remote Desktop Client RCE vulnerability affecting Windows clients. The attack requires a user to connect to a malicious RDP server; on connection, code can be executed on the victim’s system with the user’s privileges. Public patch guidance is available via Microsoft KBs (KB50...

Remote Desktop Client Remote Code Execution Vulnerability

...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-22017)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Remote Desktop Client 输入验证错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Remote Desktop Client. The following products and versions are affected: Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Remot...

Microsoft Remote Desktop Client 信息泄露漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Remote Desktop Client. The following products and editions are affected: Windows 11 for ARM64-based Systems,Windows Server 2022,Windows Server 202...

PT-2022-15674 · Zoom +1 · Zoom Rooms For Conference Room +4

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings for Windows versions prior to 5.9.7 Zoom Rooms for Conference Room for Windows versions prior to 5.10.0 Zoom Plugins for Microsoft Outlook for Windows versions prior to 5.10.3 Zoom VDI Windows Meeting Clients versions...

The vulnerability of the client of the Remote Desktop Client operating system Microsoft Windows allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client of the Microsoft Windows operating system regarding client remote desktops is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in handling client remote desktops is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Patch Tuesday March 2022

Hello everyone! I am glad to greet you from the most sanctioned country in the world. Despite all the difficulties, we carry on. I even have some time to release new episodes. This time it will be about Microsoft Patch Tuesday for March 2022. Alternative video link for Russia: I do the analysis a...