OPENSUSE-SU-2023:0411-1 Security update for putty

This update for putty fixes the following issues: putty is updated to release 0.80 Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuTTY...

Mouse cursor flickers when dragging publish app Explorer

The mouse cursor flickers when dragging the publish app Explorer. The issue doesn't happen if using window mode...

CVE-2023-6377 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

Mouse pointer in Citrix session shifted

When using Citrix Published virtual apps on a setup with 3 monitors with a resolution of "2560x1440" each and one of them is in portrait mode, the mouse pointer is shifted in the app and it is not possible to use it correctly. The mouse pointer appears to be about 5cm next to where it is shown on...

LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

The stealer malware known as LummaC2 aka Lumma Stealer now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to evade detection and exfiltrate valuable information from infected hosts. The method is designed to "delay detonation of the sample until...

kernel: HID: hyperv: avoid struct memcpy overrun warning

A compiler warning issue was found in the Linux kernel's Hyper-V HID driver that could lead to potential memory safety issues. A local user can trigger this issue when the fortified memcpy implementation detects potential buffer overflows in the mousevsconreceive function, where the compiler cann...

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

Threat actors have been observed targeting semiconductor companies in East Asia with lures masquerading as Taiwan Semiconductor Manufacturing Company TSMC that are designed to deliver Cobalt Strike beacons. The intrusion set, per EclecticIQ, leverages a backdoor called HyperBro, which is then use...

Mouse cursor invisible when hovering over text based apps in Citrix session

ADM based Endpoints/Laptops Mouse invisible when hovering over text based apps Mouse cursor not appearing with AMD integrated graphics inside the Citrix Sessions...

Mouse cursor randomly doesn't display on dual-monitor environments

Scenario 1: The mouse cursor is not displayed on the first launch VDA session. clicking can make the cursor display. Scenario 2: VDA session is in full-screen mode on the secondary monitor of the dual monitor. Move the cursor from the primary monitor to the secondary monitor, and then the cursor...

Workspace App mouse click placement mismatch

When an application is started from the Citrix Workspace for a multi-monitor setup 5+ monitor setup it's impossible to click on the app. Actual mouse click location does not match clicked location...

The text cursor display is incorrect.

In Citrix VDI or Apps, when the mouse pointer is aligned with the input field, the text cursor is displayed incorrectly...

Mouse & Keyboard might show Delay/Stops Working when using High DPI Mouse in Citrix sessions

Users using high DPI mouse and connect to a Citrix published desktop or applications both mouse and keyboard stops working. Sometimes mouse is working 4-5 seconds before it stops working. Users see a delay in Display update i.e. when moving Windows as the delay of up to 5-10 seconds after stoppin...

Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates

A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other regions in Asia. The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under its insect-themed moniker Carderbee. The...

Mouse cursor disappears when launching a session in full-screen mode

Mouse cursordisappears when launching a session in full-screen mode...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

Code injection

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

PT-2023-24350 · Kramerav · Kramerav Via Connect +1

Name of the Vulnerable Software and Affected Versions: KramerAV VIA Connect 2 versions prior to 4.0.1.1326 KramerAV VIA Go 2 versions prior to 4.0.1.1326 Description: The issue allows for local code execution at the root level when the screen is visible and remote mouse connection is enabled. Thi...

CVE-2023-33469

KramerAV VIA Connect (2) and VIA Go (2) are affected by CVE-2023-33469 when screen is visible and a remote mouse connection is enabled. Versions prior to 4.0.1.1326 allow local code execution at root level due to the default remote-mouse startup behavior. Impact is local, with high privileges ris...