Citrix Virtual Apps and Desktops Privilege Escalation (CTX678035)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2402, 1912 LTSR CU9 or 2203 LTSR CU5. It is, therefore, affected by a privilege escalation vulnerability. By exploiting this vulnerability, a local, low-privileged attacker could gain SYSTEM privilege...

Malicious code in sap-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ff217705e8fcb07d0400df59dc1f444dd9a2b41e569d21468d57e540cf39d5b The OpenSSF Package Analysis project identified 'sap-apps' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7560 Malicious code in sap-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ff217705e8fcb07d0400df59dc1f444dd9a2b41e569d21468d57e540cf39d5b The OpenSSF Package Analysis project identified 'sap-apps' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-6151

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS...

CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS...

CVE-2024-6151

CVE-2024-6151 is a Local Privilege Escalation in the Windows Virtual Delivery Agent (VDA) used by Citrix Virtual Apps and Desktops and Citrix DaaS. The bulletin CTX678035 states affected versions are: Current Release (CR) before 2402; 1912 LTSR before CU9; 2203 LTSR before CU5. Fixes are availabl...

Citrix Systems Virtual Apps and Desktops Security Vulnerability

Citrix Systems Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in versions prior to Citrix Systems Virtual Apps and Desktops 2402 that stems from the presen...

PT-2024-5132 · Zoom · Zoom Workplace Apps +1

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps and SDKs for Windows affected versions not specified Description: The issue is related to improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows. This may allow an authenticated us...

PT-2024-5107 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to insufficient input validation in some Zoom Apps and SDKs, which may allow an authenticated user to conduct a denial of service via network access. This could potentiall...

PT-2024-5176 · Zoom · Zoom Apps

Name of the Vulnerable Software and Affected Versions: Zoom Apps for Windows affected versions not specified Description: The issue is related to improper input validation in the installer for some Zoom Apps, which may allow an authenticated user to conduct a privilege escalation via local access...

Apple Removes VPN Apps from Russian App Store as Censorship Tightens

Apple removes popular VPNs from Russias App Store following government pressure. This move restricts access to free and…...

Apple Removes VPN Apps from Russian App Store Amid Government Pressure

Apple removed a number of virtual private network VPN apps in Russia from its App Store on July 4, 2024, following a request by Russia's state communications watchdog Roskomnadzor, Russian news media reported. This includes the mobile apps of 25 VPN service providers, including Hidemy.name VPN, L...

TONE Store Application Security Vulnerability

TONE Store Application is an application from TONE Japan that allows users to install and manage mobile applications. A security vulnerability exists in TONE Store Application version 3.4.2 and prior versions, which originates from a vulnerability that allows arbitrary applications to be installe...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to grant themselves elevated privileges on the device to execute arbitrary code, possibly with system privileges and gain access to sensitive data. Successful abuse requires the malicious party to tric...

CVE-2024-37077

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-37077

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-37185

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-36260

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-37030

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free...

CVE-2024-36243

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write...