Zoom Client Input Validation Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.15.5, which stemmed from an improper input validation issue...

fTPM Voltage Fault Injection

Bulletin ID: AMD-SB-4005 Potential Impact: Arbitrary Code Execution Severity: High Summary CVE-2023-20589 Researchers at the Technische Universität Berlin have reported the use of voltage fault injection attacks on ASP secure boot targeting fTPM. An attacker with specialized hardware and physical...

PT-2023-4700 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.2 Zoom VDI Client versions prior to 5.15.2 Description: The issue exists due to improper neutralization of special elements, which may allow an unauthenticated user to enable an escalatio...

Zoom Rooms Security Breach

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom Rooms for Windows version 5.15.5,...

Microsoft Teams Security Vulnerability

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Microsoft Teams...

PT-2023-4692 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.5 Description: The issue is related to an untrusted search path in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. This could...

MAVinci Desktop Software for Intel® Falcon 8+ Advisory

Summary: A potential security vulnerability in the MAVinci Desktop software for Intel® Falcon 8+ may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for MAVinci Desktop software for Intel® Falco...

Microsoft Teams Security Vulnerability

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Microsoft Teams...

Huawei HarmonyOS Input Validation Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a lax validation of input parameters that could render the desktop unavailable...

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an input validation error vulnerability, which stems from the PMS module's lax validation of input parameters, and can be...

NoMachine Backlink Vulnerability

NoMachine is a remote desktop access tool from the Luxembourg company NoMachine. A security vulnerability exists in NoMachine that can be exploited to overwrite files that require root privileges to modify by using a hard link...

[FAS]Fail to Launch Desktop after Clicking Desktop Icon with Error "Cannot Start *****"

User fail to launch desktop after clicking desktop icon with error "cannot start " In fas server event log, there is error ''S123 failed to issue a certificate for user upn''...

Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping Exploit

Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping Google Dork: NA Date: 22-07-2023 Exploit Author: H4rk3nz0 Vendor Homepage: https://www.keepersecurity.com/enGB/ Software Link: https://www.keepersecurity.com/enGB/get-keeper.html Version: Desktop App...

PT-2023-4667 · Freerdp · Freerdp

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to a Use-After-Free in processing RDPGFX CMDID RESETGRAPHICS packets. If context-maxPlaneSize is 0, context-planesBuffer will be freed, but without updating...

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping

Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping Google Dork: NA Date: 22-07-2023 Exploit Author: H4rk3nz0 Vendor Homepage: https://www.keepersecurity.com/enGB/ Software Link: https://www.keepersecurity.com/enGB/get-keeper.html Version: Desktop App...

SA-2023-07-26-CVE-2023-28129

SECURITY ADVISORY 07-26-2023 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM 2022.1 Service Update 1. This vulnerability is remediated in DSM 2022.2 Service Update 3. Vulnerability Information CVE | CVSS | Summary | Product Affected...

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability in the implementation of the Remote Desktop Protocol on Windows operating systems allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the Remote Desktop Protocol implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...

How to set up computer security for your parents

Last Sunday July 23, 2023 was National Parents Day. And maybe you are wondering how you can repay your parents for turning you into the person you are today. And we have an idea that shouldn't cost you much more than some of your time. Help them to shore up their cybersecurity, if they need it. I...