This Metasploit module exploits CVE-2022-22954, an unauthenticated server-side template injection (SSTI) vulnerability in VMware Workspace ONE Access, to execute shell commands as the horizon user.Rea ...
Continue Reading
May 30, 2022
# CVE-2022-25262 PoC + vulnerability details for CVE-2022-25262 ...Read More ...
Continue Reading
May 30, 2022
The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An ...
Continue Reading
May 30, 2022
[ in VMware Workspace ONE Access, to execute shell commands as the "horizon" user.Read More ...
Continue Reading
May 30, 2022
 On April 6, 2022, VMware published [VMSA-2022-0011](), which ...
Continue Reading
May 30, 2022
GitHub revealed details tied to last weeks incident where hackers, using stolen OAuth tokens, downloaded data from private repositories. We do not believe the attacker obtained these tokens via a ...
Continue Reading
May 30, 2022
Back to Main
