4959 matches found
The vulnerability of the Citrix Workspace App for HTML5 lies in the redirection of URLs to unreliable websites, allowing a hacker to redirect users to arbitrary URL addresses.
The vulnerability of the Citrix Workspace App for HTML5 relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...
How to Automate the Hardest Parts of Employee Offboarding
According to recent research on employee offboarding, 70% of IT professionals say they've experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to an account that wasn't deprovisioned, a surprise bill for resources that aren't in use anymor...
Citrix Workspace for Mac does not function with background elements are disabled.
Citrix Workspace App for Mac may not function as expected if background elements are disabled. The following errors may be encountered: Users may not be able to add an account. Users may not be able to log in to the Citrix Workspace app. CWA for Mac auto-update may fail Users may encounter...
GO-2024-2999 Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker...
A week in security (July 29 – August 4)
Last week on Malwarebytes Labs: Threat actor impersonates Google via fake ad for Authenticator Scammers are impersonating cryptocurrency exchanges, FBI warns Meta to pay $1.4 billion over unauthorized facial recognition image capture Apple fixes Siri vulnerabilities that could have allowed...
OESA-2024-1937 plasma-workspace security update
Plasma 5 libraries and runtime components Security Fixes: KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to...
Netflix Dispatch 安全漏洞
Netflix Dispatch is a US-based Netflix software that provides deep integration with Slack, GSuite, Jira and other tools and provides security event management. Netflix Dispatch suffers from a security vulnerability that stems from allowing code to be executed within blocks that have not been...
Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services
A Google Workspace vulnerability exposed thousands of accounts after hackers bypassed email verification. Learn how to protect your…...
Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services
Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Googles "Sign in with Google" feature...
GHSA-XW35-RRCP-G7XM Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
Impact The server allow to create any user who can trigger a pipeline run malicious workflows: - Those workflows can either lead to a host takeover that runs the agent executing the workflow. - Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are...
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
Impact The server allow to create any user who can trigger a pipeline run malicious workflows: - Those workflows can either lead to a host takeover that runs the agent executing the workflow. - Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are...
PT-2024-29277 · Unknown · Woodpecker
Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 2.7.0 Description: The server allows any user to create and trigger malicious workflows, potentially leading to a host takeover or extraction of secrets normally provided to plugins. This issue can be exploited...
gnome-shell-extensions bug fix update
An update is available for gnome-shell-extensions. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Shell extensions allow for modifying the default GNOME...
Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149
Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for HTML5. Refer to below for further details: Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for HTML5. Citrix Workspace app for HTML5...
The vulnerability of the Analytics Workspace web interface module in the Splunk Web platform for operational analysis in Splunk Enterprise allows a hacker to bypass security restrictions and execute arbitrary commands.
The vulnerability of the Analytics Workspace web interface in the Splunk Web platform for operational analysis in Splunk Enterprise is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary...
Citrix Virtual Apps and Desktop Profile Management (UPM, WEM)
Citrix Profile Management Introduction Profile Management is intended as a profile solution for Citrix Virtual Apps servers, virtual desktops created with Citrix Virtual Desktops, and physical desktops. You install Profile Management on each computer whose profiles you want to manage. Active...
CVAD Workspace App (Windows, MAC, Linux)
Introduction This article is a summary of the top support articles related to CVAD Workspace App Windows, MAC, Linux Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points that will be addressed in detail in the linked content...
License Acquisition Error 500 Occurs and Workspace Control Fails
Users are unable to connect to XenApp farm and receive the following error message: “license acquisition error 500: Unable to acquire a license from server name server. Please contact your system administrator or open the event viewer for more details." If users connect through Web Interface and...
“Nearly all” AT&T customers had phone records stolen in new data breach disclosure
In a déjà-vu nightmare, US phone giant AT&T has notified customers that cybercriminals managed to download phone call and text message records of "nearly all of AT&T cellular customers from May 1, 2022 to October 31, 2022 as well as on January 2, 2023". In a filing with the Securities and Exchang...
