Woodpecker's custom workspace allow to overwrite plugin entrypoint executable

Impact The server allow to create any user who can trigger a pipeline run malicious workflows: - Those workflows can either lead to a host takeover that runs the agent executing the workflow. - Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are...

PT-2024-29277 · Unknown · Woodpecker

Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 2.7.0 Description: The server allows any user to create and trigger malicious workflows, potentially leading to a host takeover or extraction of secrets normally provided to plugins. This issue can be exploited...

gnome-shell-extensions bug fix update

An update is available for gnome-shell-extensions. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Shell extensions allow for modifying the default GNOME...

The vulnerability of the Analytics Workspace web interface module in the Splunk Web platform for operational analysis in Splunk Enterprise allows a hacker to bypass security restrictions and execute arbitrary commands.

The vulnerability of the Analytics Workspace web interface in the Splunk Web platform for operational analysis in Splunk Enterprise is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary...

Citrix Virtual Apps and Desktop Profile Management (UPM, WEM)

Citrix Profile Management Introduction Profile Management is intended as a profile solution for Citrix Virtual Apps servers, virtual desktops created with Citrix Virtual Desktops, and physical desktops. You install Profile Management on each computer whose profiles you want to manage. Active...

CVAD Workspace App (Windows, MAC, Linux)

Introduction This article is a summary of the top support articles related to CVAD Workspace App Windows, MAC, Linux Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points that will be addressed in detail in the linked content...

License Acquisition Error 500 Occurs and Workspace Control Fails

Users are unable to connect to XenApp farm and receive the following error message: “license acquisition error 500: Unable to acquire a license from server name server. Please contact your system administrator or open the event viewer for more details." If users connect through Web Interface and...

“Nearly all” AT&T customers had phone records stolen in new data breach disclosure

In a déjà-vu nightmare, US phone giant AT&T has notified customers that cybercriminals managed to download phone call and text message records of "nearly all of AT&T cellular customers from May 1, 2022 to October 31, 2022 as well as on January 2, 2023". In a filing with the Securities and Exchang...

Citrix Workspace HTML5 Client Installed (Windows)

Binary data citrixworkspacehtml5wininstalled.nbin...

Citrix Workspace App for HTML5 Multiple Vulnerabilities (CTX678037)

The version of Citrix Workspace App for HTML5 installed on the remote host is prior to 2404.1. It is therefore affected by multiple vulnerabilities as described in the CTX678037 advisory: - Bypass of GACS Policy Configuration settings CVE-2024-6148 - Redirection of users to a vulnerable URL...

Vulnerabilities fixed in Citrix Workspace, NetScaler ADC and NetScaler Gateway

Cirtix has fixed a number of vulnerabilities in Workspace, NetScaler ADC and NetScaler Gateway A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Increased user privileges Citrix has...

CVE-2024-6286

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-6286

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-6149

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5...

CVE-2024-6148

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

CVE-2024-6148

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

CVE-2024-6149

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5...

CVE-2024-6149

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5...

CVE-2024-6149

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5...

CVE-2024-6149

CVE-2024-6149 affects the Citrix Workspace app for HTML5. According to Citrix CTX678037, versions before 2404.1 are vulnerable to an untrusted URL redirection when the HTML5 session is launched, with the issue described as “Redirection of users to a vulnerable URL.” The vulnerability requires an ...