8521 matches found
CVE-2023-34154
CVE-2023-34154 affects Huawei HarmonyOS’ VR screen projection component. The vulnerability is described as undefined/ improper permissions that allow third‑party apps to create windows arbitrarily, leading to resource consumption (availability impact). CVSSv3.1 base score 8.2 (HIGH) with network ...
CVE-2023-34154
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources...
CVE-2023-34154
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources...
PT-2023-21366 · Mattermost · Mattermost Apps Framework
Name of the Vulnerable Software and Affected Versions: Mattermost Apps Framework affected versions not specified Description: The issue concerns a failure to verify secrets in incoming webhook requests, allowing an attacker to modify the contents of posts sent by the Apps. Recommendations: At the...
PT-2023-20206
Name of the Vulnerable Software and Affected Versions ZTE AndroidTV STBs affected versions not specified Description The issue is related to improper permission settings, allowing non-privileged applications to perform protected functions. This could lead to the clearance of personal data and...
PT-2023-24696 · Huawei · Huawei Vr Screen Projection
Name of the Vulnerable Software and Affected Versions: HUAWEI VR screen projection affected versions not specified Description: The issue concerns undefined permissions in HUAWEI VR screen projection, allowing third-party apps to create windows in an arbitrary manner and consume system resources...
CVE-2023-2783: Missing Authorization
Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps...
PT-2023-21367
Name of the Vulnerable Software and Affected Versions Mattermost affected versions not specified Description The issue allows a regular user to send install requests to the Apps because it fails to verify if the requestor is a sysadmin or not before allowing install requests. Recommendations At t...
Mattermost security vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in the Mattermost Apps Framework, which can be exploited by an attacker to send a POST request to the application's Webhook path and modify the content of messages...
Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files
An updated version of an Android remote access trojan dubbed GravityRAT has been found masquerading as messaging apps BingeChat and Chatico as part of a narrowly targeted campaign since June 2022. "Notable in the newly discovered campaign, GravityRAT can exfiltrate WhatsApp backups and receive...
Microsoft Security Update Validation Report June 2023
Microsoft’s June 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...
Citrix Virtual Apps and Desktops Improper Access Control (CTX559370)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by an improper access control vulnerability. Users with only access to launch VDA applications can launch an unauthorized desktop. This vulnerability is in the Windows Virtual Delivery Agent, which is...
CVE-2023-32024
Microsoft Power Apps Spoofing Vulnerability...
Spoofing
Microsoft Power Apps Spoofing Vulnerability...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
CVE-2023-32024
CVE-2023-32024: Microsoft Power Apps Spoofing Vulnerability. A remote attacker can spoof the user interface in Microsoft Power Apps (and related Dynamics context) due to a UI spoofing flaw. Impact is spoofing the UI to deceive users; no public exploitation details are confirmed in these sources. ...
CVE-2023-32024: Improper Neutralization of Input During Web Page Generation
Microsoft Power Apps Spoofing Vulnerability...
Windows and Linux Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2023-24490
A vulnerability has been identified that impacts Virtual Delivery Agents for Windows or Linux used by Citrix Virtual Apps and Desktops and Citrix DaaS. The vulnerability affects the following supported versions of Windows Virtual Delivery Agent: Current Release CR Citrix Virtual Apps and Desktops...
