Lucene search
+L

6313 matches found

BDU FSTEC
BDU FSTEC
•added 2024/10/08 12:00 a.m.•19 views

The vulnerability of the RES software service for controlling user access to applications and data in Ivanti Workspace Control allows a intruder to increase their privileges.

The vulnerability of the RES software service for controlling user access to applications and data in Ivanti Workspace Control is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00268EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•24 views

The software for user access control of applications and data in Ivanti Workspace Control (IWC) makes it possible for a intruder to increase their privileges.

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control IWC is related to the implementation of security features at the client side. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.8CVSS5.5AI score0.00245EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•18 views

The software for user access control of applications and data in Ivanti Workspace Control is vulnerable, allowing a intruder to increase their privileges and execute arbitrary code.

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges and execute arbitrary code...

8.8CVSS5.8AI score0.00266EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2024/09/25 3:30 a.m.•32 views

Denial of service in rocket chat message parser

Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service DoS. Attackers who craft messages with specific characters may crash the workspace due to an issue in the message parser...

7.5CVSS6.9AI score0.00593EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2024/09/25 1:57 a.m.•2 views

Malware in design-system-intranet-header-workspace

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/25 1:57 a.m.•8 views

Malicious code in design-system-intranet-header-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92014e7f1376852bd6f176fc1cefd54ea673d7e95e89db2ec6b1a960e2fb9021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/09/25 1:57 a.m.•12 views

MAL-2024-8970 Malicious code in design-system-intranet-header-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92014e7f1376852bd6f176fc1cefd54ea673d7e95e89db2ec6b1a960e2fb9021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Citrix
Citrix
•added 2024/09/25 12:00 a.m.•17 views

Browser content redirection is supported for Citrix Workspace app 2402 LTSR now

Browser content redirection is supported for Citrix Workspace appCWA 2402 LTSR...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/09/25 12:00 a.m.•23 views

Rocket.Chat 安全漏洞

Rocket.Chat is a chat program from Rocket.Chat Inc. A security vulnerability exists in Rocket.Chat. An attacker has exploited the vulnerability to cause a workspace crash. The following versions are affected: version 6.12.0, version 6.11.2, version 6.10.5, version 6.9.6, version 6.8.6, version...

7.5CVSS6.5AI score0.00593EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/09/18 12:00 a.m.•18 views

The vulnerability of the Citrix Workspace App for Windows lies in its insufficient resource control during its existence. This allows attackers to increase their privileges.

The vulnerability of the Citrix Workspace App for Windows relates to insufficient resource control during its existence. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.00246EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
•added 2024/09/17 12:00 p.m.•31 views

How to Investigate ChatGPT activity in Google Workspace

When you connect your organization's Google Drive account to ChatGPT, you grant ChatGPT extensive permissions for not only your personal files, but resources across your entire shared drive. As you might imagine, this introduces an array of cybersecurity challenges. This post outlines how to see...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/09/17 7:48 a.m.•48 views

SUSE-SU-2024:3288-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go 1.20 for building - Bump go-retryablehttp to version 0.7.7 CVE-2024-6104, bsc1227038 - Migrate from disabled to manual service mode - Add0003-Bump-go-retryablehttp.patch - Update to 2.45.6 jscPED-3577:...

7.5CVSS7.5AI score0.04561EPSS
SaveExploits0References9
Imperva Blog
Imperva Blog
•added 2024/09/16 12:00 p.m.•19 views

Cursor’s Magic Comes with a Catch: The Trust Setting You’re Missing

Occasionally, a new AI tool emerges unexpectedly and dominates the conversation on social media. This time, that tool is Cursor, an AI coding platform that’s making waves for simplifying app development with advanced models like Claude 3.5 Sonnet and GPT-4o. In a recent video posted on X, which h...

8.1AI score
SaveExploits0
OSV
OSV
•added 2024/09/16 2:09 a.m.•20 views

RHSA-2019:2141 Red Hat Security Advisory: kde-workspace security and bug fix update

Bulletin has no description...

4.3CVSS5.2AI score0.02087EPSS
SaveExploits0References12
Citrix
Citrix
•added 2024/09/16 12:00 a.m.•52 views

| Citrix Workspace App 24.x SSON fails and ssonsvr.exe not running on client

SSON fails with CWA 2402 and 2405.10 The logon to a session stops at the "other user" screen . It is also noticed that the ssonsvr.exe process is not running on the client...

7AI score
SaveExploits0
NCSC
NCSC
•added 2024/09/13 8:42 a.m.•31 views

Vulnerabilities fixed in Citrix Workspace App for Windows

Citrix has fixed vulnerabilities in the Citrix Workspace App for Windows. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and potentially execute code with SYSTEM privileges. Citrix has released updates to fix the vulnerabilities. See attached...

7.3CVSS7.4AI score0.00246EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/09/13 12:00 a.m.•128 views

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX691485)

The version of Citrix Workspace installed on the remote host is prior 2402 LTSR CU1 or 2405. It is, therefore, affected by multiple vulnerabilities: - Local privilege escalation allows a low-privileged user to gain SYSTEM privileges Improper Control of a Resource Through its Lifetime CVE-2024-788...

7.3CVSS6AI score0.00246EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2024/09/12 9:30 p.m.•42 views

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.16.0 release

Red Hat OpenShift Dev Spaces 3.16 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

8.8CVSS6.5AI score0.01939EPSS
SaveExploits3References2
OSV
OSV
•added 2024/09/11 11:15 p.m.•8 views

CVE-2024-7890

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

7.3CVSS5.8AI score0.00176EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/11 11:15 p.m.•52 views

CVE-2024-7889

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

7.3CVSS0.00246EPSS
SaveExploits0References1
Rows per page
Query Builder