7097 matches found
PT-2023-21366 · Mattermost · Mattermost Apps Framework
Name of the Vulnerable Software and Affected Versions: Mattermost Apps Framework affected versions not specified Description: The issue concerns a failure to verify secrets in incoming webhook requests, allowing an attacker to modify the contents of posts sent by the Apps. Recommendations: At the...
PT-2023-24696 · Huawei · Huawei Vr Screen Projection
Name of the Vulnerable Software and Affected Versions: HUAWEI VR screen projection affected versions not specified Description: The issue concerns undefined permissions in HUAWEI VR screen projection, allowing third-party apps to create windows in an arbitrary manner and consume system resources...
Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files
An updated version of an Android remote access trojan dubbed GravityRAT has been found masquerading as messaging apps BingeChat and Chatico as part of a narrowly targeted campaign since June 2022. "Notable in the newly discovered campaign, GravityRAT can exfiltrate WhatsApp backups and receive...
Microsoft Security Update Validation Report June 2023
Microsoft’s June 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...
Citrix Virtual Apps and Desktops Improper Access Control (CTX559370)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by an improper access control vulnerability. Users with only access to launch VDA applications can launch an unauthorized desktop. This vulnerability is in the Windows Virtual Delivery Agent, which is...
CVE-2023-32024
Microsoft Power Apps Spoofing Vulnerability...
Spoofing
Microsoft Power Apps Spoofing Vulnerability...
CVE-2023-32024
CVE-2023-32024: Microsoft Power Apps Spoofing Vulnerability. A remote attacker can spoof the user interface in Microsoft Power Apps (and related Dynamics context) due to a UI spoofing flaw. Impact is spoofing the UI to deceive users; no public exploitation details are confirmed in these sources. ...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
Windows and Linux Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2023-24490
A vulnerability has been identified that impacts Virtual Delivery Agents for Windows or Linux used by Citrix Virtual Apps and Desktops and Citrix DaaS. The vulnerability affects the following supported versions of Windows Virtual Delivery Agent: Current Release CR Citrix Virtual Apps and Desktops...
Microsoft Power Apps Spoofing Vulnerability
...
June 13, 2023—KB5027223 (OS Build 22000.2057)
None None...
KLA50320 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Power Apps can be exploited remotely to spoof user interface. 2. A spoofing...
KLA60730 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Autodesk® FBX® SDK 20...
PT-2023-3131 · Microsoft · Power Apps
Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Power Apps development environment. Exploitation of this issue may...
Microsoft Power Apps 安全漏洞
Microsoft Power Apps is a low-code development platform from Microsoft Corporation USA designed to help users easily build customized enterprise-class applications. A security vulnerability exists in Microsoft Power Apps that stems from the presence of a spoofing vulnerability...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Power Apps and Dynamics. An authenticated malicious person could exploit the vulnerabilities to impersonate another user and execute arbitrary code execute arbitrary code with privileges of that user. Microsoft Power Apps:...
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
Impact There are two separate security vulnerabilities here: 1 a security vulnerability that allows users to read arbitrary files on the machines that are running shared Gradio apps 2 the ability of users to use machines that are sharing Gradio apps to proxy arbitrary URLs Patches Both problems...