CVE-2023-20950

In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ICA launch delay issue after upgrading to Workspace app 2203 CU2

After upgrading to Workspace app 2203 CU2, customer may experience ICA launch delay issues...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

Design/Logic Flaw

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

HCL Technologies HCL Launch 跨站脚本漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch that stems from vulnerability to HTML injection...

ASB-A-230492955

In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

ASB-A-195756028

In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-42452

CVE-2022-42452 affects HCL Launch and is a stored HTML injection vulnerability that can lead to XSS and Open Redirections. Public sources describe the issue and reference affected HCL Launch versions (e.g., 6.x to 7.x ranges listed by CNNVD; PT-2023 notes affected versions not specified). The NVD...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

PT-2023-14117 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue is related to HTML injection, where HTML code is stored and included without proper sanitization. This can potentially lead to further attacks, such as Cross-Site Scripting XSS...

[CGS] Citrix Cloud Workspace launching Desktop via CSG is stuck at "connecting" and failed

Citrix Cloud Workspace launching Desktop/App via CSG Citrix Gateway Service is stuck at "connecting" and failed. In the Netscaler Gateway Service logs, seen in ns.log: Event "Application launch failed. Connect command sent to Controller."...

CVE-2023-20960

In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product...

Owner is able to mint 1 token more than 1000 prelaunch tokens due to wrong equality check

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Owner is able to mint 1 token more than 1000 prelaunch tokens due to wrong check here Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant...

Virtual Application Launch Failure with error "The published resource is not available currently"

Launch virtual app failure via Gateway with error :"The published resource is not available currently"...

OpenAI Releases Developer APIs for ChatGPT and Whisper Models

By Deeba Ahmed OpenAI has announced the launch of developer APIs for the ChatGPT chatbot. This means that developers will be… This is a post from HackRead.com Read the original post: OpenAI Releases Developer APIs for ChatGPT and Whisper Models...

How to disable "This Site is trying to open citrix workspace launcher" prompt when launch resource

"This Site is trying to open citrix workspace launcher" when launch resourcevia Edge or Google Chrome...

Schneider Electric Modicon Remote Launch (CVE-2018-7823)

A Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause remote launch of SoMachine Basic when sending crafted ethernet message. This plugin only works with Tenable.ot. Please visit...

SUSE CVE-2008-1196

Stack-based buffer overflow in Java Web Start javaws.exe in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file...