CVE-2023-39459

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

CVE-2023-39459

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

CVE-2023-39462

CVE-2023-39462 affects Triangle MicroWorks SCADA Data Gateway. The vulnerability stems from improper validation in the processing of workspace files, allowing remote attackers to upload arbitrary files. Although authentication is required to exploit, the existing authentication mechanism can be b...

CVE-2023-39462 Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability

Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the...

CVE-2023-39459 Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

CVE-2023-39459

CVE-2023-39459 affects Triangle MicroWorks SCADA Data Gateway. The flaw is in the processing of workspace files where user-supplied paths are not properly validated before file operations, enabling a local attacker to create arbitrary files in the Administrator context by enticing a target to vis...

CVE-2023-39459 Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. A file upload vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which stems...

CVE-2023-39459: Improper Limitation of a Pathname to a Restricted Directory

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A security vulnerability exists in Triangle MicroWorks SCADA Data Gateway that originates from a specific flaw in workspace files that allows remote attackers to create arbitrary files...

CVE-2024-32467

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue...

CVE-2024-32467

MeterSphere (open source continuous testing platform) is affected in versions prior to 2.10.14-lts. The issue allows members without space permissions to view member information from other workspaces beyond their authority. The root cause is insufficient access control that permits cross-workspac...

PT-2024-6663 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an authentication bypass weakness in the message broker service, allowing a local authenticated attacker to escalate their privileges. This is due to t...

PT-2024-24594

Name of the Vulnerable Software and Affected Versions MeterSphere versions prior to 2.10.14-lts Description The issue allows members without space permissions to view member information from other workspaces beyond their authority. Recommendations For versions prior to 2.10.14-lts, update to...

MeterSphere 安全漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A security vulnerability exists in versions prior to MeterSphere 2.10.14-lts, which stems from an unauthorized member being able to overstep their rights to view member information in other workspaces...

Duplicate Icon visible for all published Applications

Duplicate icons appear for the same applications in Citrix Workspace...

A new tool bar has appearred since Citrix Workspace App for ChromeOS 2402.

A new tool bar has appearred after upgrading to Citrix Workspace App for ChromeOS 2402. Prior to 2402, the old old tool bar was displayed...

PT-2024-10421

Name of the Vulnerable Software and Affected Versions KDE Plasma Workspace versions prior to 5.27.11.1 KDE Plasma Workspace 6.x versions prior to 6.0.5.1 Description The issue allows connections via ICE based purely on the host, i.e., all local connections are accepted. This enables another user ...

Porch-Pirate - The Most Comprehensive Postman Recon / OSINT Client And Framework That Facilitates The Automated Discovery And Exploitation Of API Endpoints And Secrets Committed To Workspaces, Collections, Requests, Users And Teams

Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconaissance / OSINT framework for Postman. While existing tools are great proof of concepts, they only attempt to identify very specific keywords as "secrets", and in very...

The vulnerability of the DocumentHandler component of the ONLYOFFICE Workspace document management system arises due to deficiencies in the encryption of user-input data. This vulnerability allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the DocumentHandler component of the ONLYOFFICE Workspace document management system exists due to deficiencies in the encryption of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...