Remote Desktop Client Remote Code Execution Vulnerability

...

Chatwork Desktop Application (Mac) vulnerable to code injection

Overview Chatwork Desktop Application Mac provided by Chatwork Co., Ltd. contains a code injection vulnerability CWE-94. Koh M. Nakagawa of FFRI Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...

PT-2023-3356 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Client affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Remote Desktop Client. It allows remote attackers to execute arbitrary code on the system...

Chatwork 代码注入漏洞

Chatwork is a business group chat application from Chatwork, Inc. A security vulnerability exists in Chatwork Desktop Application version 2.6.43 and earlier, which stems from a code injection vulnerability that allows a non-administrative user to store and access audio and image data for the...

CVE-2023-32546

Code injection vulnerability exists in Chatwork Desktop Application Mac 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent...

Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients versions prior to...

CVE-2023-32546

Code injection vulnerability exists in Chatwork Desktop Application Mac 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit the vulnerability to remotely execute code. The following products and editions are affected:Windows 10 Version...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom for Windows, Zoom Rooms, and Zoom VDI Windows Meeting clients versions prior to...

PT-2023-3130 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Remote Desktop Protocol RDP in the Windows operating system, associated with insufficient access restrictions...

Windows Remote Desktop Security 安全漏洞

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft USA. A security vulnerability exists in Windows Remote Desktop Security. The following products and versions are affected:Windows 10 Version 1809 for x64-based Systems,Windows...

CVE-2023-32546

CVE-2023-32546 concerns the Chatwork Desktop Application (Mac) up to version 2.6.43, where a code injection vulnerability (CWE-94) could allow a non-administrative user to store and access audio and image data from the product without user consent. The issue is localized (Mac) and exists in older...

Kali Linux 2023.2 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2023.2. This release has various impressive updates. The changelog highlights over the last few weeks since March’s release of 2023.1 is: New VM image for Hyper-V - With “Enhanced Session Mode” out of the box Xfce audio stack update: enters...

PT-2023-21302 · Bitwarden · Bitwarden Windows Desktop Application

Name of the Vulnerable Software and Affected Versions: Bitwarden Windows desktop application versions prior to v2023.4.0 Description: The issue concerns the storage of biometric keys in the Windows Credential Manager by the Bitwarden Windows desktop application, making them accessible to other...

Prompt error "Cannot start desktop" when launching desktop through SSLVPN

End-users fist build SSLVPN connection to Citrix Gateway: Access Storefront directly tolaunch their desktops. Below error prompt:"Cannot start desktop ". ICA file cannot be downloaded...

CVE-2023-27706

Summary: CVE-2023-27706 affects the Bitwarden Windows desktop client prior to v2023.4.0. The issue is that biometric keys were stored in Windows Credential Manager, making them accessible to other local unprivileged processes. This creates a risk of unauthorized access to biometric material used ...

UBUNTU-CVE-2023-30576

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...

Docker Desktop 代码注入漏洞

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Apache Guacamole 资源管理错误漏洞

Apache Guacamole is a clientless remote desktop gateway from the Apache USA Foundation. The product supports protocols such as VNC, RDP and SSH. A resource management error vulnerability exists in Apache Guacamole versions 0.9.10 through 1.5.1, which stems from the fact that Apache Guacamole may...