Rainbond has a logic flaw vulnerability (CNVD-2023-29035)

Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Rainbond has a flawed logic vulnerability

Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Rainbond

Rainbond is a cloud-native application management platform. Rainbond suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...

CVE-2022-47968

Summary: CVE-2022-47968 affects Heimdall Application Dashboard up to version 2.5.4, with a reflected and stored XSS in the "Application name" on the Add application page; the stored payload is then visible/triggers on the Application list page. What is affected: Heimdall Application Dashboard (ve...

CVE-2022-46312

The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications...

PT-2022-27804 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Application management module affected versions not specified Description: The issue is related to a vulnerability in permission verification within the application management module. This vulnerability can be exploited to cause an unexpected...

Huawei HarmonyOS 代码问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an elevation of privilege vulnerability, which stems from a serialization and deserialization mismatch in the AMS module. An...

[SECURITY] Fedora 35 Update: enlightenment-0.25.4-1.fc35

Enlightenment window manager is a lean, fast, modular and very extensible win dow manager for X11 and Linux. It is classed as a "desktop shell" providing the things you need to operate your desktop or laptop, but is not a whole ' application suite. This covered launching applications, managing...

Holiday Readiness, Part I: Best Practices for Maintaining Peak Performance

Preparing for a post-pandemic holiday season means managing for peak application and system performance...

TCL LinkHub Mesh Wifi confctl_get_guest_wlan information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1503 TCL LinkHub Mesh Wifi confctlgetguestwlan information disclosure vulnerability August 1, 2022 CVE Number CVE-2022-27633 SUMMARY An information disclosure vulnerability exists in the confctlgetguestwlan functionality of TCL LinkHub Mesh Wifi MS1G0001.0014...

CVE-2022-30413

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...

CVE-2021-46787

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash...

XML External Entity (XXE) Injection

WSO2 Identity Application Management Component is vulnerable to XML external entity attacks. The vulnerability exists in unmarshalSP function in ApplicationManagementServiceImpl.java because the SP file content is not parsed securely during unmarshalling which allows an attacker to gain access to...

WordPress SpiderCatalog plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress SpiderCatalog plugin 1.7.3 and earlier versions, which stems...

Command Execution Vulnerability in Zero Degrees of Space at Jiangyin Leader Information Technology Co.

Jiangyin Leader Information Technology Co., Ltd. was founded in 2006 by visiting scholars from the University of Copenhagen, Denmark, is a high-tech enterprise specializing in the development of application management software and Internet application technology development. Jiangyin City Leader...

How to Automatically Move Applications to Start Menu Using Receiver for Windows 4.0 and 4.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to automatically move applications to the Start menu using Receiver for...

Adobe Creative Cloud Desktop Application Input Validation Improperity Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An improper input validation vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker could exploit the vulnerability to elevate...

360 Secure Desktop suffers from dll hijacking vulnerability

360 Secure Desktop is a desktop application management software that helps you better organize your computer desktop documents and settings. 360 Secure Desktop has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

The vulnerability of the Windows Enterprise application management service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Enterprise application management service is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Chinese APT group targets India and Hong Kong using new variant of MgBot malware

This blog post was authored by Hossein Jazi and Jérôme Segura On July 2, we found an archive file with an embedded document pretending to be from the government of India. This file used template injection to drop a malicious template which loaded a variant of Cobalt Strike. One day later, the sam...