4887 matches found
Devolutions Workspace 安全漏洞
Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace Desktop version 2023.1.1.3 and prior versions. An attacker could exploit the vulnerability to unlock Hub Workspace without being prompted to enter a password...
PT-2023-18560 · Devolutions · Devolutions Workspace Desktop
Name of the Vulnerable Software and Affected Versions: Devolutions Workspace Desktop versions 2023.1.1.3 and earlier Description: The issue allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force...
Metasploit Weekly Wrap-Up
VMware Workspace ONE Access exploit chain A new module contributed by jheysel-r7 exploits two vulnerabilities in VMware Workspace ONE Access to attain Remote Code Execution as the horizon user. First being CVE-2022-22956, which is an authentication bypass and the second being a JDBC injection in...
Unable to import GPO into Workspace Environment Management service - Invalid Zip file
When trying to import a GPO into WEM console in Citrix Cloud Web console, users get an error stating "Invalid ZIP file. Replace your file and try again"...
Unable to launch ICA session due to wfica32.exe signature validation failure
After upgrading Citrix Workspace App to 2203 CU2 and 2210.5 and above in customer's client machine, ICA session became unable to launch. Specifically, ICA file can be downloaded but wfica32.exe never starts. The issue doesn't occur in the same client machine with Citrix Workspace App for Windows...
How to find projected release dates for new versions of workspace app.
How to find projected release dates for new versions of workspace app...
VMware Workspace ONE Access Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workspace ONE Access CVE-2022-22960', 'Description' = %q This module exploits CVE-2022-22960 which allows the user to overwrite the...
Workspace ONE Data Collection
Binary data workspaceonecollect.nbin...
Workspace ONE API Settings
Binary data workspaceonesettings.nbin...
VMware Workspace ONE Access Privilege Escalation Exploit
This Metasploit module exploits CVE-2022-22960 which allows the user to overwrite the permissions of the certproxyService.sh script so that it can be modified by the horizon user. This allows a local attacker with the uid 1001 to escalate their privileges to root access. This module requires...
VMware Workspace ONE Remote Code Execution Exploit
This Metasploit module combines two vulnerabilities in order achieve remote code execution in the context of the horizon user. The first vulnerability, CVE-2022-22956, is an authentication bypass in OAuth2TokenResourceController ACS which allows a remote, unauthenticated attacker to bypass the...
Mware Workspace ONE Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workspace ONE Access VMSA-2022-0011 exploit chain', 'Description' = %q This module combines two vulnerabilities in order achieve remote co...
What's the Difference Between CSPM & SSPM?
Cloud Security Posture Management CSPM and SaaS Security Posture Management SSPM are frequently confused. The similarity of the acronyms notwithstanding, both security solutions focus on securing data in the cloud. In a world where the terms cloud and SaaS are used interchangeably, this confusion...
ICA launch delay issue after upgrading to Workspace app 2203 CU2
After upgrading to Workspace app 2203 CU2, customer may experience ICA launch delay issues...
Changes to Citrix Workspace Standard and ShareFile Content Collaboration in Citrix Workspace Bundles
Effective April 17, 2023, Cloud Software Group has made the decision to end of renewal EoR Citrix Workspace Standard and remove ShareFile Content Collaboration from the Citrix Workspace cloud and on-prem subscriptions. This change is part of our ongoing efforts to enhance our product offerings an...
AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services
A new "comprehensive toolset" called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from popular cloud service providers. "The spread of AlienFox represents an unreported trend towards attacking more minimal cloud services,...
[CGS] Citrix Cloud Workspace launching Desktop via CSG is stuck at "connecting" and failed
Citrix Cloud Workspace launching Desktop/App via CSG Citrix Gateway Service is stuck at "connecting" and failed. In the Netscaler Gateway Service logs, seen in ns.log: Event "Application launch failed. Connect command sent to Controller."...
Workspace Error "Unable to add account with the given server URL" after enabling WAF on ADC
After enabling WAF on ADC, the following error is seen while adding Citrix Gateway URL on Workspace : "Unable to add account with the given server URL. Ensure that it is correct or enter your email address." Traffic Flow Brief Topo: Workspace LB SSL Virtual Serveron ADC1 , WAF enabled Citrix...
The vulnerability of the collaboration data application for VMware Workspace ONE Content, related to authentication procedures that allow attackers to bypass the authentication process
The vulnerability of the collaboration data application for VMware Workspace ONE Content is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to bypass the authentication process...