PT-2025-18091 · Onevision · Onevision Workspace

Name of the Vulnerable Software and Affected Versions: OneVision Workspace versions prior to WS23.1 SR1 build w31.040 Description: The issue allows for arbitrary Java EL execution. This means that an attacker could potentially execute malicious Java Expression Language code, leading to unauthoriz...

CVE-2023-42404

OneVision Workspace before WS23.1 SR1 build w31.040 allows arbitrary Java EL execution...

CVE-2023-42404

CVE-2023-42404 concerns OneVision Workspace prior to WS23.1 SR1 (build w31.040), where the underlying issue allows arbitrary Java EL execution. The connected sources consistently identify the affected product as OneVision Workspace and specify the vulnerable version range (pre-WS23.1 SR1, build w...

Citrix DaaS - Unable to reconnect to a disconnected session

Users attempting to reconnect to their previously disconnected ICA sessions while accessing Citrix Virtual Apps and Desktops CVAD via Citrix Workspace App CWA are unable to do so. The reconnection process fails, potentially leaving users with a frozen or unresponsive application or desktop sessio...

Dust: User Limit Bypass via Pending Invitations in Workspace System

The platform's workspace user limit was found to be vulnerable to bypass through the use of pending invitations. Users were able to join a workspace by signing up with an invited email, even after the workspace had reached its user limit for the current subscription tier. This allowed an unlimite...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, two Malicious File Upload vulnerabilities have been addressed. Please...

HTML Element / Text not appearing correctly on Auth Window using Citrix Workspace App Native]

When using CWA Native their was HTML Element / Text not appearing correctly on Auth Window. - Text was missing / Custom Banner was missing - Issue is not present when using MS Edge browser...

Citrix DaaS | Workspace expiration period forced Users to re-authenticate

When the user logs in to workspace URL, they are unexpected behavior while using CWA. -They will be prompted to keep themselves logged in due to a Inactive policy set. -Once they select keep me logged in, the workspace page gets refreshed and they don't see any apps or desktops...

CVE-2025-32018 Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docs

Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a regression affecting the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted, either directly by the us...

Users experiencing greyed out "Log Off" buttons on CWA LTSR 2203.1

Upgraded Workspace app for Windows from 2203.1 to 2402 CU2...

Citrix policies filtered by Client IP address not applying after 2411

Citrix policies are applied using as filter IP address of the client The IP addresses defined are the ones of the endpoints who has Citrix Workspace App installed The policy worked correctly before upgrading VDA to version 2411 However, when the VDA is upgraded to version 2411 or newer, the...

PT-2025-15453 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor versions 0.45.0 through 0.48.6 Description: The issue affects the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted to automatically write to files outside o...

Cursor 路径遍历漏洞

Cursor is an AI code editor from the Cursor open source. A path traversal vulnerability exists in Cursor versions 0.45.0 through 0.48.6, which stems from not properly restricting file path modification permissions, which could lead to a specially crafted context-triggered write to a file outside...

PT-2025-15271 · Philips · Advanced Visualization Workspace +1

Name of the Vulnerable Software and Affected Versions: Intellispace Portal versions 12 and prior Advanced Visualization Workspace version 15 Description: The issue is related to the lack of protection mechanisms in the Intellispace Portal binaries, making it possible for attackers to...

Philips IntelliSpace Portal 安全漏洞

Philips IntelliSpace Portal is an advanced medical image analysis platform from Philips Netherlands that provides multimodal image processing and automated diagnostic tools. A security vulnerability exists in Philips IntelliSpace Portal version 12 and earlier and Advanced Visualization Workspace...

Citrix Workspace App for MAC - Intermittent sign in failure, browser access works

Administrators may notice that the Mac end points intermittently fail sign into workspace app. Visiting the store via browser would work consistently...

Citrix Virtual Apps and Desktops 2402 - Custom Application menus cut off after VDA upgrade

After upgrading the VDA from VDA 1912 to VDA 2402, users may notice that the fonts and graphics are not fitting within the custom application UI. Issue is generally seen when the client display has high resolution. Setting the High DPI setting on the Citrix Workspace App for Windows to Yes, may...

AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

GHSA-PP64-WJ43-XQCR AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

AWS SAM CLI Path Traversal allows file copy to build container

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. When running the AWS SAM CLI build process with Docker and symlinks are include...