How to Successfully Test Citrix StoreFront Beacons Inside a Remote Desktop Session

This article describes how to successfully test the Citrix StoreFront Beacons functionality with Citrix Receiver 3.1 Standard or later when connecting to workstations using a Remote Desktop session RDP. By default, a configured Citrix Receiver 3.1 Standard or later with Beacons and stores always...

CVE-2024-32670

The CVE-2024-32670 entry relates to Samsung Galaxy SmartTag2 prior to version 0.20.04. The root cause is exposure of sensitive information via BLE advertising, which can allow an attacker to potentially identify the tag’s location. Affected product: Samsung Galaxy SmartTag2; affected component/fu...

PT-2024-24755 · Samsung · Samsung Galaxy Smarttag2

Name of the Vulnerable Software and Affected Versions: Samsung Galaxy SmartTag2 versions prior to 0.20.04 Description: The issue allows attackers to potentially identify the tag's location by scanning the BLE advertising, exposing sensitive information to unauthorized actors. Recommendations: For...

SAMSUNG Galaxy SmartTag2 Security Vulnerability

SAMSUNG Galaxy SmartTag2 is a smart loss prevention device from Samsung South Korea. It can be located by Bluetooth. A security vulnerability exists in SAMSUNG Galaxy SmartTag2 versions prior to 0.20.04, which stems from the exposure of sensitive information to an unauthorized actor, which could...

Boston Business Journal Names Rapid7 as a Best Place to Work in Boston

On June 13th, 2024, Rapid7 was recognized by The Boston Business Journal as a Best Place to Work in Boston. This marks the 13th consecutive year Rapid7 has made the list, this time coming in at 8 in the extra large company category. Best Places to Work rankings are based on anonymous employee...

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data...

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data...

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data...

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data...

CVE-2024-34603

CVE-2024-34603 concerns Samsung Message with improper access control that could let a local attacker access location data. Affected: Samsung Message versions prior to SMR Jul-2024 Release 1. Root cause: insufficient access control enabling local data leakage (location). Impact: exposure of locati...

SAMSUNG Messages Security Breach

SAMSUNG Messages is a messaging application from the South Korean company Samsung SAMSUNG. Messages can be exchanged with any user with a phone number. SAMSUNG Messages suffers from a security vulnerability that stems from improper access control allowing a local attacker to access location data...

PT-2024-26018 · Samsung · Samsung Message

Name of the Vulnerable Software and Affected Versions: Samsung Message versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to access location data. This could potentially lead to unauthorized access to sensitive...

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

The vulnerability of Firefox browser for iOS, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Firefox browser for iOS is related to information representation errors in the user interface. Exploiting this vulnerability allows an attacker to perform a spoofing attack by replacing the URL address in the location string cp...

The vulnerability of the User Management component of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager allows a intruder to enhance their privileges.

The vulnerability of the User Management component of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow an attacker...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-29041)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29041 advisory. - Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alp...

CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...

CVE-2024-38519

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...

CVE-2024-5735 Full Path Disclosure in AdmirorFrames Joomla! Extension

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0...

CAREL Boss-Mini

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : CAREL Equipment : Boss-Mini Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...