Malicious code in DіffEոgiոeTrаy (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

PT-2024-13022 · Win Zapp · Win Zapp

Name of the Vulnerable Software and Affected Versions: Win ZApp versions prior to 4.3.0 Description: The issue is related to an arbitrary file deletion in ZSATrayManager, which is responsible for protecting the temporary encrypted ZApp issue reporting file from unprivileged end user access and...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Hide "Virtual Disk status" icon from System tray on the endpoints

Disable the vDisk status icon from being displayed within the system tray on the endpoints after launching ICA sessions against PVS provisioned VDAs...

[SECURITY] Fedora 36 Update: parcellite-1.2.2-1.fc36

Parcellite is a stripped down, basic-features-only clipboard manager with a small memory footprint for those who like simplicity. In GNOME and Xfce the clipboard manager will be started automatically. For other desktops or window managers you should also install a panel with a system tray or...

[SECURITY] Fedora 38 Update: parcellite-1.2.2-1.fc38

Parcellite is a stripped down, basic-features-only clipboard manager with a small memory footprint for those who like simplicity. In GNOME and Xfce the clipboard manager will be started automatically. For other desktops or window managers you should also install a panel with a system tray or...

[SECURITY] Fedora 37 Update: parcellite-1.2.2-1.fc37

Parcellite is a stripped down, basic-features-only clipboard manager with a small memory footprint for those who like simplicity. In GNOME and Xfce the clipboard manager will be started automatically. For other desktops or window managers you should also install a panel with a system tray or...

Potential front-running attacks in buy function

Lines of code Vulnerability details Impact The buy function generates new trays and stores them in the tiles mapping based on the value of lastHash. Since the value of lastHash is publicly accessible and can be predicted, an attacker could potentially front-run other users to mint specific trays...

Namespace fuse ignores font class attribute from tile data

Lines of code Vulnerability details Impact The fuse function present in the Namespace contract mints a new Namespace NFT based on the given character data that references Tray tiles owned by the caller. For each character, the implementation will use the characterToUnicodeBytes function from the...

Incorrect argument passed to "Utils.characterToUnicodeBytes" in "Namespace.fuse"

Lines of code Vulnerability details Impact The function Namespace.fuse uses Utils.characterToUnicodeBytes to get the unicode bytevalue for a given Tile. The first argument of characterToUnicodeBytes is an uint8 value representing the font class. Instead of passing the font class in the tile data,...

Users can fuse an NFT without burning a tray NFT

Lines of code Vulnerability details Impact Users can fuse an NFT without burning a tray NFT Proof of Concept The Namespace protocol allows user to fuse a new Namespace NFT with the referenced tiles. Inside the fuse function, the protocol first transfer fusing costs from msg.sender to revenue...

User can fuse an NFT with minimal cost

Lines of code Vulnerability details Impact User can fuse an NFT with minimal cost Proof of Concept The fuse is used to fuse a new Namespace NFT with the referenced tiles,if it is called, the protocol will transfer fusing costs from msg.sender to revenue address. The fusing costs is calculated...

SUSE CVE-2017-6931

In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If you have implemented a Settings Tray form in contrib or a custom module, the correct access checks should be added. Th...

CVE-2022-36414

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

CVE-2022-36414

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

Scooter Software Beyond Compare 安全漏洞

Scooter Software Beyond Compare is content comparison tool software from Scooter Software. A security vulnerability exists in Scooter Software Beyond Compare versions 4.2.0 through 4.4.2 prior to 4.4.3, which stems from an elevated privilege vulnerability in the Windows EXE installer that allows...

MAL-2022-7379 Malicious code in zd-product-tray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f08459ac38bdfda7c944191d011cc919dba112e119d7414d98bf6d4724342d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zd-product-tray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f08459ac38bdfda7c944191d011cc919dba112e119d7414d98bf6d4724342d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Drupal Settings Tray access bypass

In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If you have implemented a Settings Tray form in contrib or a custom module, the correct access checks should be added. Th...