CVE-2024-32945

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

PT-2024-24992

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions =2.16.0 Description The issue arises from the failure to protect against abuse of a globally shared MathJax state, allowing an attacker to alter the contents of a LaTeX post. This can be achieved by creating...

Mattermost Mobile Apps Security Vulnerability

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.16.0 and earlier, which stems from a failure to prevent misuse of globally shared MathJax state, allowing an attacker to change the content of a LateX...

CVE-2024-27238: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39767: Improper Authentication

Mattermost Mobile Apps versions =2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that...

PT-2024-28665 · Mattermost +1 · Mattermost Mobile Apps +1

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.16.0 Description: The issue allows a malicious server to send push notifications with another server's diagnostic ID or server URL, making them appear as legitimate push notifications from the actual server ...

Mattermost Mobile Apps Security Vulnerability

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.16.0 and prior versions that stems from receiving push notifications without verifying that they are actually coming from the server they claim to be...

CVE-2024-39819: Download of Code Without Integrity Check

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-32945: Missing Initialization of Resource

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-39826: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-27241: Improper Input Validation

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-27240: Improper Input Validation

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access...

Citrix Virtual Apps and Desktop - Graphics, HDX Optimization and Audio

Introduction This article is a summary of the support articles and documentation related to Graphics and Display issues, HDX Optimization Teams and Browser Content Redirection and Audio. Overview of the Issue HDX is a set of remoting technologies providing the user with the best possible virtual...

Citrix Virtual Apps and Desktop - Upgrading, Installing and Migration issues

Introduction This article is a summary of the top support articles related to updating, install and migration of Citrix environments including Controllers and VDA. The most commonly used support articles and guides are below. There are three main areas covered in this summary including Controller...

Citrix Virtual Apps and Desktop - Configuration, Policies and Security.

Introduction This article is a summary of the top support articles related to Citrix Virtual Apps and Desktop product configuration, compatibility and security. It also provides information related to Citrix Policies: Common issues, configuration and troubleshooting. Top Knowledge Content Securit...

Citrix Virtual Apps and Desktops: Authentication

Introduction This article is a summary of the top support articles and Product Documents related to Citrix Virtual Apps and Desktops Authentication Methods. The most commonly used support articles and guides are below. It is recommended that all customers refer to the product documentation for...

Citrix Virtual Apps and Desktop - Peripherals (USB, Printers , Drives etc.)

Introduction This article is a summary of the top support articles related to Peripherals - USB, Printers , Drives etc. Top Support Knowledge Content Printing Issues CTX227534 - Citrix Printing Quick Start Guide CTX232031 - How to use Citrix Policy to Set a Default Session Printer CTX140208 -...