CVE-2024-10018

CVE-2024-10018 affects the mobile app com.transsion.aivoiceassistant from TECNO/Transsion. The root cause is described as improper permission control, which can allow launching of any unexported component within the app. According to the cited sources, this can lead to high-impact outcomes affect...

Citrix Virtual Apps and Desktops: Session Launch Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with session launch in Citrix Virtual Apps and Desktops. Overview of the Issue The process of session launch in Citrix Virtual Apps and Desktops is depende...

CVE-2024-38425

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425 Improper Authorization in Performance

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425 Improper Authorization in Performance

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425

Technical details about CVE-2024-38425 are not publicly available in the provided documents. The descriptions mention information disclosure via implicit app-launch broadcasts but do not specify affected products, versions, vectors, or fixes. Monitor for updates.

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when sending an implicit broadcast containing app launch information...

PT-2024-27996 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when sending an implicit broadcast that contains app launch details. This implies a potential leak of sensitiv...

Doppler Launches ‘Change Requests’ to Strengthen Secrets Management Security with Audited Approvals

San Francisco, United States / California, 3rd October 2024, CyberNewsWire...

Session Launch Failure Issue when Anti Keylogging is enabled [Windows 11 24H2 Update]

On Windows endpoints with the most recent Windows 11 24H2 update, session launches may encounter failures when the anti-keylogging feature App Protection is enabled. This issue is attributed to the changes in Windows system APIs leveraged by App Protection features...

CVAD 2402 - Unable to launch the desktop intermittently

Desktop launches and then disappears. Once the machine is rebooted sometimes it works and sometimes it does not work even after reboot. Problem started after upgrading from VDA 2209/2311 to VDA 2402...

Rapid7 Recognized in Forrester’s 2024 Attack Surface Management (ASM) Wave Report

This week, Rapid7 was recognized as a Contender in Forrester’s report, The Forrester WaveTM: Attack Surface Management ASM Solutions Q3 2024. We’re proud to have been selected for inclusion in the report, which to us reflects a continued dedication to enabling customers to: Monitor 100% of their...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7, which stems from the fact that when a shortcut fails to launch another application, the application may be able to...

CVE-2024-44182

CVE-2024-44182 (Apple macOS) describes a local vulnerability where an app may access sensitive data logged when a shortcut fails to launch another app. Remediation is to upgrade affected macOS releases to macOS Ventura 13.7, macOS Sonoma 14.7, or macOS Sequoia 15, where the issue has been address...

PT-2024-38613 · Overwolf · Overwolf

Name of the Vulnerable Software and Affected Versions: Overwolf affected versions not specified Description: A local privilege escalation issue is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an...

Windows 11 VDA seamless app launches with fullscreen black border behind logon window

The customer uses windows 11 VDAs to provide access to a published application which has desktop operating system requirement. The initial launch of the published application showed the seamless application launch with a full screen black border behind the logon window. This is disruptive to user...

CVE-2024-8227 Tenda O1 DhcpSetSer fromDhcpSetSer stack-based overflow

A vulnerability was found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffer...

CVE-2024-8144

ClassCMS 4.8 contains an XSS vulnerability in the Logo Handler component, specifically via the unknown functionality at /index.php/admin. The issue allows remote exploitation and has public disclosure. Several sources corroborate a cross-site scripting impact originating from that admin entry poi...

Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure Vulnerability

Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver. 4.00...

Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure

Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver. 4.00...