CVE-2019-11507

In Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page...

CVE-2019-11507

In Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page...

Cross site scripting

In Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page...

CVE-2019-11507

Pulse Secure Pulse Connect Secure (PCS) is affected by a reflected XSS on the Application Launcher page in PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3. The issue is caused by insufficient sanitization, allowing an attacker to execute scripts in the context of the affected page if a user visit...

CVE-2019-11507

In Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page...

PT-2019-12341 · Pulse Secure · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Secure Pulse Connect Secure PCS versions 8.3.x through 8.3R7.0 Pulse Secure Pulse Connect Secure PCS versions 9.0.x through 9.0R2 Description: An XSS issue has been found on the Application Launcher page. Recommendations: For Pulse Secu...

Winco Fireworks FireFly Bluetooth Low Energy Improper Access Control Vulnerability

Summary An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability. Tested Versions Winco Fireworks FireFly FW-1007 V2.0 Product URLs...

Fedora Update for switchboard-plug-pantheon-shell FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for wingpanel FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: wingpanel-2.2.3-2.fc29

Stylish top panel that holds indicators and spawns an application launcher...

[SECURITY] Fedora 29 Update: switchboard-plug-pantheon-shell-2.8.1-2.fc29

The desktop plug is a section in Switchboard, the elementary System Settings app, where users can configure the wallpaper, dock, and hotcorners. In the future the desktop plug might also handle other desktop settings such as the panel, app launcher, and window manager...

[SECURITY] Fedora 30 Update: switchboard-plug-pantheon-shell-2.8.1-2.fc30

The desktop plug is a section in Switchboard, the elementary System Settings app, where users can configure the wallpaper, dock, and hotcorners. In the future the desktop plug might also handle other desktop settings such as the panel, app launcher, and window manager...

UltraVNC Launcher 1.2.2.4 Denial Of Service

Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-04-14 Vendor Homepage: https://www.uvnc.com/ Software Link: https://www.uvnc.com/downloads/ultravnc/126-download-ultravnc-1224.html Tested Version: 1.2.2.4 Tested on: Windows 7 x64...

UltraVNC Launcher 1.2.2.4 - Path Denial of Service (PoC)

UltraVNC Launcher 1.2.2.4 - Path Denial of Service PoC Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-04-14 Vendor Homepage: https://www.uvnc.com/ Software Link:...

UltraVNC Launcher 1.2.2.4 - Path Denial of Service Exploit

Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service PoC Discovery by: Victor Mondragón Vendor Homepage: https://www.uvnc.com/ Software Link: https://www.uvnc.com/downloads/ultravnc/126-download-ultravnc-1224.html Tested Version: 1.2.2.4 Tested on: Windows 7 x64 Service Pack 1 Steps to...

UltraVNC Launcher 1.2.2.4 - 'Path' Denial of Service (PoC)

Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-04-14 Vendor Homepage: https://www.uvnc.com/ Software Link: https://www.uvnc.com/downloads/ultravnc/126-download-ultravnc-1224.html Tested Version: 1.2.2.4 Tested on: Windows 7 x64...

Gamers Urged to Patch Critical Bugs in GOG Galaxy

GOG Galaxy Games, a popular video game digital distribution platform that enables users to purchase new games and launch them from their desktop, is riddled with vulnerabilities, according to researchers at Cisco Talos. The researchers assert that the GOG Galaxy video game launcher contains six...

eVisitorPass elevation of privilege vulnerability (CNVD-2019-12477)

Threshold eVisitorPass is a visitor management system from Threshold Canada. An extraction vulnerability exists in the virtual keyboard launch menu in Threshold eVisitorPass version 1.5.5.2. A local attacker could use this vulnerability to close the application and launch other processes...

CVE-2018-18256

An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher...

Design/Logic Flaw

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the calwhitelist table in the Custom App Launcher CAL database, and potentially gain privileges by placing a Trojan horse program at an app pathname...