Lucene search
+L

8732 matches found

Citrix
Citrix
•added 2021/12/29 12:00 a.m.•23 views

How to test an application without Citrix Virtual Apps using RDP Initial App

Sometimes an application does not work as desired when published as an application through Citrix Virtual Apps. In the diagnostic process, you might be asked to test the application without Citrix as an RDP Initial App...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/12/28 2:15 a.m.•14 views

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

8.1CVSS5.4AI score0.0087EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/12/28 2:15 a.m.•17 views

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

8.1CVSS5.8AI score0.0087EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/12/28 1:30 a.m.•46 views

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

8AI score0.0087EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/28 12:00 a.m.•71 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.07836EPSS
SaveExploits2References4
attackerkb
attackerkb
•added 2021/12/27 7:15 p.m.•13 views

CVE-2021-23244

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission...

7.8CVSS7.1AI score0.00654EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2021/12/27 8:30 a.m.•28 views

New Android Malware Targeting Brazil's Itaú Unibanco Bank Customers

Researchers have discovered a new Android banking malware that targets Brazil's Itaú Unibanco with the help of lookalike Google Play Store pages to carry out fraudulent financial transactions on victim devices without their knowledge. "This application has a similar icon and name that could trick...

7AI score
SaveExploits0
CNVD
CNVD
•added 2021/12/24 12:00 a.m.•60 views

Yappli has unspecified vulnerabilities

Yappli, an application development platform from Yappli Japan, has a security vulnerability in Yappli Android Apps that could be exploited by attackers to access malicious websites containing carefully constructed URLs, where the application could be directed to connect to certain unintended...

8.1CVSS2.6AI score0.0087EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2021/12/23 1:15 a.m.•8 views

DEBIAN-CVE-2021-4052

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS8.1AI score0.00978EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/23 1:15 a.m.•33 views

Design/Logic Flaw

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

6.8CVSS8.8AI score0.00978EPSS
SaveExploits0References5Affected Software3
osv_ubuntu
osv_ubuntu
•added 2021/12/23 1:15 a.m.•15 views

UBUNTU-CVE-2021-4052

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS7.3AI score0.00978EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/12/23 12:45 a.m.•68 views

CVE-2021-4052

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS9.6AI score0.00978EPSS
SaveExploits0
CVE
CVE
•added 2021/12/23 12:45 a.m.•172 views

CVE-2021-4052

CVE-2021-4052 describes a use-after-free bug in the Chromium-based Chrome engine before version 96.0.4664.93, affecting the web apps component. An attacker could convince a user to install a crafted extension, potentially enabling heap corruption and arbitrary code execution. Publicly documented ...

8.8CVSS8.8AI score0.00978EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2021/12/22 7:15 p.m.•155 views

CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

9.8CVSS7.8AI score0.21492EPSS
SaveIn wildExploits1References4
NVD
NVD
•added 2021/12/22 7:15 p.m.•30 views

CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

9.8CVSS0.21492EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/22 7:15 p.m.•34 views

Design/Logic Flaw

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

7.5CVSS9.7AI score0.21492EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2021/12/22 6:25 p.m.•277 views

CVE-2021-45461

CVE-2021-45461 affects FreePBX with restapps (aka Rest Phone Apps) versions 15.0.19.87–15.0.19.88 and 16.0.18.40–16.0.18.41. The vulnerability allows remote attackers to execute arbitrary code. It was exploited in the wild in December 2021. The fixed releases are 15.0.20 and 16.0.19. Remediation:...

9.8CVSS9.7AI score0.21492EPSS
SaveIn wildExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/22 12:00 a.m.•21 views

PT-2021-7259

Name of the Vulnerable Software and Affected Versions FreePBX versions 15.0.19.87 through 15.0.19.88 FreePBX versions 16.0.18.40 through 16.0.18.41 Description The issue allows remote attackers to execute arbitrary code. This has been exploited in the wild, with reports of attacks starting in...

10CVSS6.3AI score0.21492EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•19 views

Yappli security vulnerabilities

Yappli, an application development platform from Yappli Japan, has a security vulnerability in Yappli Android Apps that could be exploited by attackers to access malicious websites containing carefully constructed URLs, where the application could be directed to connect to certain unintended...

8.1CVSS5.6AI score0.0087EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
•added 2021/12/22 12:00 a.m.•11 views

VulnCheck KEV: CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

9.8CVSS7.7AI score0.21492EPSS
SaveIn wildExploits1References5
Rows per page
Query Builder