AttackFeed by Joe Wagner | Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App  - Full Disclosure

Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App  – Full Disclosure

Posted on By Joe-W No Comments on Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App  – Full Disclosure
Alert Feeds

 

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 29

*Update 2026-04-28:* The vendor contacted us and now provides a patched version v1.3.674 which can be obtained at the
following URL:

https://desktime.com/download
 – Read More  – Full Disclosure 

You may also like

AttackFeed by Joe Wagner | [IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026  - Full Disclosure
Alert Feeds
[IWCC 2026] CfP: 15th International Workshop on Cyber Crime – Linköping, Sweden, Aug 24-27, 2026  – Full Disclosure
April 29, 2026
AttackFeed by Joe Wagner | APPLE-SA-05-11-2026-6 macOS Tahoe 26.5  - Full Disclosure
Alert Feeds
APPLE-SA-05-11-2026-6 macOS Tahoe 26.5  – Full Disclosure
May 17, 2026
AttackFeed by Joe Wagner | JSON Deserialiser Unconstrained Resource Consumption Quick Overview  - Full Disclosure
Alert Feeds
JSON Deserialiser Unconstrained Resource Consumption Quick Overview  – Full Disclosure
March 12, 2026
AttackFeed by Joe Wagner | SEC Consult SA-20260212-0 :: Multiple Vulnerabilities in various Solax Power Pocket WiFi models  - Full Disclosure
Alert Feeds
SEC Consult SA-20260212-0 :: Multiple Vulnerabilities in various Solax Power Pocket WiFi models  – Full Disclosure
February 16, 2026

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.