Xerox Workplace Suite 授权问题漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. An authorization issue vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which stems from API Security being bypassed by modifying the header...

Xerox Workplace Suite 安全漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from the return of plaintext secrets and plaintext remote system secrets...

PT-2025-3155 · Xerox · Xerox Workplace Suite

Name of the Vulnerable Software and Affected Versions: Xerox Workplace Suite versions prior to 5.6.701.9 Description: A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading t...

Xerox Workplace Suite 安全漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from the ability to arbitrarily upload, delete, and read files by manipulating the header...

PT-2025-3156 · Xerox · Xerox Workplace Suite

Name of the Vulnerable Software and Affected Versions: Xerox Workplace Suite versions prior to 5.6.701.9 Description: The issue allows attackers to intercept or access sensitive secrets without encryption, as they are exposed in clear text both locally and remotely. Recommendations: For versions...

PT-2025-3157

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description A mail spoofing issue allows attackers to forge email headers, making it appear as though messages are sent from trusted sources. Recommendations For versions prior to 5.6.701.9,...

PT-2025-3158

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description The issue concerns weak default folder permissions in the software, allowing unauthorized users to access, modify, or delete files. There is no information provided about the...

Xerox Workplace Suite 数据伪造问题漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. A data forgery issue vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which stems from the inclusion of an email spoofing issue...

Zoom Workplace Desktop App < 6.2.5 DoS (ZSB-25002)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25002 advisory. - Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct...

Zoom Workplace Desktop App < 6.2.10 DoS (ZSB-25005)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25005 advisory. - Symlink following in the installer for Zoom Workplace app for macOS before 6.2.10 may allow an authenticated user to...

Zoom Workplace Desktop App < 6.2.5 Escalation of Privilege (ZSB-25004)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25004 advisory. - Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduc...

Zoom Workplace Desktop App < 6.2.5 Out-of-bounds Write (ZSB-25003)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25003 advisory. - Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via networ...

Zoom Workplace Desktop App < 6.2.10 Privilege Escalation (ZSB-25006)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25006 advisory. - Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalatio...

PT-2025-3754 · Zoom · Zoom Workplace App For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue concerns an untrusted search path in the installer for some Zoom Workplace Apps for Windows. This could allow an authorized user to conduct an escalation o...

PT-2025-3755 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace App for macOS versions prior to 6.2.10 Description: The issue allows an authenticated user to conduct a denial of service via local access due to symlink following in the installer. Recommendations: For versions prior to 6.2.10...

PT-2025-3756 · Zoom · Zoom Workplace App For Linux

Name of the Vulnerable Software and Affected Versions: Zoom Workplace App for Linux versions prior to 6.2.10 Description: The issue is related to type confusion in the application, which may allow an authorized user to conduct an escalation of privilege via network access. This could potentially...

CISA: 2019 Edition - Violence in the Federal Workplace: Appendices A, B, and C: Awareness, Resources, and Case Studies

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: 2019 Edition - Violence in the Federal Workplace: a Guide for Prevention and Response

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Rapid7 Recognized with Top Score of 100 in 2025 Corporate Equality Index

On January 7, the Human Rights Campaign Foundation released their 2025 Corporate Equality Index CEI, where Rapid7 earned a top score of 100. The CEI is the nation’s leading benchmark for LGBTQ+ workforce equality, evaluating policies and practices in areas such as non-discrimination, equitable...

What is Nudge Security and How Does it Work?

Regain control of SaaS sprawl with Day One discovery of all SaaS and GenAI accounts along with workflows to help you mitigate security risks, curb rogue app usage, and manage SaaS spend. In today's highly distributed workplace, every employee has the ability to act as their own CIO, adopting new...