42Gears Surelock 代码问题漏洞

42Gears Surelock is an industry-leading tool from 42Gears USA that locks devices into kiosk mode. A security vulnerability exists in 42Gears Surelock version 2.40.0 that stems from the presence of elevation of privilege and local code execution issues...

January 10, 2023—KB5022286 (OS Build 17763.3887) - EXPIRED

None None...

April 11, 2023—KB5025224 (OS Build 22000.1817)

None None...

CWA for Chrome OS 23.3.0.40 - keyboard is unresponsive inside the Citrix session

Symptom 1: The keyboard is non-responsive when running in Kiosk mode though it is responsive at the Citrix login in kiosk mode users can enter their username and password but becomes non-responsive inside the Citrix session. Symptom 2: 1. Launch CWA for Chrome OS desktop session 2. Go to the full...

February 14, 2023—KB5022840 (OS Build 17763.4010) - EXPIRED

None None...

MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

kiosk-uat.adp.com Cross Site Scripting vulnerability OBB-3079218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Usbsas - Tool And Framework For Securely Reading Untrusted USB Mass Storage Devices

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Description Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of t...

gnome-kiosk bug fix and enhancement update

An update is available for gnome-kiosk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Kiosk provides a desktop environment suitable for fixed purpose or...

CVE-2022-36220

Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...

CVE-2022-36220

Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...

Design/Logic Flaw

Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...

CVE-2022-36220

CVE-2022-36220 affects Safe Exam Browser for Windows prior to version 3.4.0. The issue is a kiosk breakout vulnerability that allows code execution via the browser’s print dialog when no quit password is required. Root cause: UI/workflow flaw enabling escape from the kiosk environment through the...

CVE-2022-36220

Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...

Safe Exam Browser 安全漏洞

Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams to be taken. A security vulnerability exists in Safe Exam Browser Windows versions prior to 3.4.0 that originates from a kiosk breakout no exit code and allows an attacker to...

MAL-2022-687 Malicious code in @ucs-private/kiosk-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de1a0f664e77a677fdc4beaa36878c5bb5d4d5bcc90bd96af13153c0164c53af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-26348

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded in...

CVE-2022-26348

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded in...

Sql injection

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded in...

The vulnerability of the Kiosk mode implementation in Siemens SIMATIC software allows a intruder to enhance their privileges.

The vulnerability of the Kiosk mode implementation in Siemens SIMATIC software products is related to insecure resource initialization. Exploiting this vulnerability can allow attackers to enhance their privileges by opening the printer’s dialog box in the vulnerable application, even if the...