Remote Desktop Client Remote Code Execution Vulnerability

...

Malicious code in seafoam-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1292 Malicious code in seafoam-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User...

PT-2023-2696 · Microsoft · Remote Desktop Client +2

Name of the Vulnerable Software and Affected Versions: Windows 10 version 22H2 Description: The issue exists due to insufficient input validation in the Remote Desktop Client of the Windows operating system. This allows an attacker to execute arbitrary code, potentially impacting the system. The...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Windows RDP Client. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

PT-2023-2719 · Microsoft · Remote Desktop

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop app for Windows affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Microsoft Remote Desktop app for Windows. Exploitation of this issue could allow a...

ALSA-2023:2532 Low: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A security vulnerability exists in Microsoft Remote Desktop Client. The following products and versions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...

Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: clients using /parallel command line switch might read...

KLA49154 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote cod...

Workspace app timeout when launching desktop VDI which is in powered off state

VDA is in powered Off state on the hypervisor. User clicks on the desktop icon and machine starts on hypervisor due to powerOnlaunch request and registers but the launch fails with the below error : Citrix Workspace : Could not start appThere was a problem contacting "XXX"...

Exploit for Path Traversal in Parallels Parallels_Desktop

Parallels Desktop VM Escape This repository contains an explo...

xfce4-settings: Browser Argument Injection

Background xfce4-settings contains the configuration system for the Xfce desktop environment. Description xfce4-settings does not sufficiently sanitize URLs opened via xdg4-mime-helper-tool which is called when a user clicks a link in e.g. Firefox. Impact The vulnerability can be leveraged into...

appium-desktop OS Command Injection vulnerability

appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection...

CVE-2023-2479

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...

CVE-2023-2000

Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...

Code injection

Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...

CVE-2023-2000 Unrestricted navigation due to unvalidated mattermost server redirection

Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...

CVE-2023-2000

CVE-2023-2000 affects Mattermost Desktop App. The issue is an unvalidated mattermost server redirect, enabling navigation to an arbitrary website. Documents consistently describe the vulnerability as related to server redirects not being properly authenticated/validated, leading to potential unre...