19261 matches found
Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments
CISA has received multiple reports of a large-scale spearphishing campaign targeting organizations in several sectors, including government and information technology IT. The foreign threat actor, often posing as a trusted entity, is sending spearphishing emails containing malicious remote deskto...
[SECURITY] Fedora 40 Update: NetworkManager-libreswan-1.2.24-1.fc40
This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...
Mattermost Desktop 9.5.x < 9.5.9 / 9.11.x < 9.11.1 (MMSA-2024-00363)
The version of Mattermost Desktop installed on the remote host is prior to 9.5.9 or 9.11.1. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00363 advisory. - Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one...
GO-2024-3227 Mattermost incorrectly issues two sessions when using desktop SSO in github.com/mattermost/mattermost-server
Mattermost incorrectly issues two sessions when using desktop SSO in github.com/mattermost/mattermost-server...
Mattermost incorrectly issues two sessions when using desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 incorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
GHSA-HM57-H27X-599C Mattermost incorrectly issues two sessions when using desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 incorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214
CVE-2024-10214 affects Mattermost: specifically Mattermost 9.11.x (<=9.11.1) and 9.5.x (
CVE-2024-10214 Incorrect Session Creation with Desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
Chatwork Desktop Application (Windows) uses a potentially dangerous function
Overview Chatwork Desktop Application Windows provided by kubell Co., Ltd. contains an issue with use of potentially dangerous function CWE-676, which allows a user to access an external website via a link in the application. RyotaK of Flatt Security Inc. directly reported this vulnerability to t...
CVE-2024-50307
Use of potentially dangerous function issue exists in Chatwork Desktop Application Windows versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed ...
CVE-2024-50307
Use of potentially dangerous function issue exists in Chatwork Desktop Application Windows versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed ...
CVE-2024-50307
CVE-2024-50307 affects Chatwork Desktop Application (Windows) before 2.9.2. The vulnerability arises from use of a potentially dangerous function (CWE-676) that can be exploited when a user clicks a specially crafted link, allowing an arbitrary file to be downloaded from an external site and exec...
CVE-2024-50307
Use of potentially dangerous function issue exists in Chatwork Desktop Application Windows versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed ...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost version 9.11.1 and prior versions 9.11.X and version 9.5.9 and prior versions 9.5.x. The vulnerability stems from incorrectly issuing two sessions, one in...
PT-2024-34130 · Chatwork · Chatwork Desktop Application
Name of the Vulnerable Software and Affected Versions: Chatwork Desktop Application Windows versions prior to 2.9.2 Description: A use of potentially dangerous function issue exists in the application. If a user clicks a specially crafted link, an arbitrary file may be downloaded from an external...
KDE KMail 安全漏洞
KDE KMail is an email component in Kontact a personal information management suite from the KDE community. A security vulnerability exists in KDE KMail versions prior to 6.2.0 that stems from plaintext HTTP being used for URLs to retrieve configurations, which allows an attacker to trigger the us...
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
The Computer Emergency Response Team of Ukraine CERT-UA has detailed a new malicious email campaign targeting government agencies, enterprises, and military entities. "The messages exploit the appeal of integrating popular services like Amazon or Microsoft and implementing a zero-trust...
[SECURITY] Fedora 41 Update: NetworkManager-libreswan-1.2.24-1.fc41
This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...
One Identity Safeguard for Privileged Sessions 安全漏洞
One Identity Safeguard for Privileged Sessions is a platform from US-based One Identity, Inc. stores and manages sensitive credentials such as passwords, keys and other keys in a centralized, hardened vault. A security vulnerability exists in One Identity Safeguard for Privileged Sessions prior t...