CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

Citrix Workspace App for Linux: How to trust a CA certificate?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article's objective is to describe the steps involved in trusting a CA certificate in Citrix...

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

Connection failures due to SSL certificate errors with Citrix Workspace app for Chrome / Citrix Receiver for Chrome

Connection to StoreFront/VDA will fail and may show cannot connect to server error or some SSL Certificate error in console logs. One of the reason could be invalid SSL certificate. Applicable Products: Citrix Receiver for HTML5, Citrix Receiver for Chrome, Citrix Workspace app for Chrome, Citrix...

Controlling Citrix Workspace app Refresh Time

Note:- This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team. Citrix Workspace app would periodically refresh the resources from the server. By default, periodic refresh happens every 60 minutes after th...

Configuration of DPI matching and client-side scaling with Citrix Workspace app for Windows

DPI scaling is a critical consideration when using high-resolution monitors over 1920x1080 with Citrix Virtual Apps and Desktops. Without the proper product versions and configuration, the Citrix session could be displayed at resolutions and scales that diverge from the local client configuration...

How to Enable and Collect Logging for Citrix Workspace App (CWA) for Mac

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Workspace App CWA for Maclogging This article provides an overview of logging features...

Workspace Control - Connect and Disconnect button in Receiver for Web are not visible

Consider the following scenario. You have enabled Workspace Control for Receiver for Webin your Xen Desktop environment. Additionally, you have enabled the setting to display Reconnect/Disconnect button for Receiver for Web asshown in the screenshot below: However, when user logs on toReceiver fo...

Oracle Hyperion Unspecified Vulnerability in Oracle Hyperion Financial Reporting Component

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications, it provides financial results, report production and other functions.Oracle Hyperion Financial Reporting is one of the financial statement management component. An unspecified vulnerability exists...

Configure Citrix Profile Management through WEM

Instruct engineers in how to configure citrix profile management through WEM...

CVE-2017-10358

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion subcomponent: Workspace. The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2017-10358

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion subcomponent: Workspace. The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

WEM Console Access error: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service..."

When attempting to connect to the WEM site using the WEM Admin console, the following message appears: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management...

Microsoft Office 2007 Groove Security Bypass / Code Execution Exploit

Microsoft Office 2007 Groove contains a security bypass issue regarding 'Workspace Shortcut' files .GLK because it allows arbitrary registered URL Protocols to be passed, when only 'grooveTelespace://' URLs should be allowed, which allows execution of arbitrary code upon opening a 'GLK' file...

Microsoft Office 2007 Groove Security Bypass / Code Execution

Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007 32-bits Due to the nature of the issue, it would work on the x64 version of Office 2007, but I don't know if there's one ?? Tested on: Windows 7/Server 2008/Vista/Serve...

Microsoft Office Groove - Workspace Shortcut Arbitrary Code Execution

Microsoft Office Groove - Workspace Shortcut Arbitrary Code Execution Title: MS Office Groove 'Workspace Shortcut' Arbitrary Code Execution Vulnerability Date: September 28th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/...

Microsoft Office Groove - 'Workspace Shortcut' Arbitrary Code Execution

Title: MS Office Groove 'Workspace Shortcut' Arbitrary Code Execution Vulnerability Date: September 28th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007 32-bits x86 Tested on: Windows 7/Server 2008/Vista/Serve...