VMware Unified Access Gateway and Horizon View vulnerability

Claudio Moletta · 6 January 2020 · 1 min read

Research
CVE

There is a heap-based buffer overflow vulnerability which affects VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4). This issue may be exploited remotely to execute code on the security gateway. VMware Unified Access Gateway 2.9 is not affected. This issue has been addressed in VMware Unified Access Gateway 2.8.1, Horizon View 7.1.0 and 6.2.4.

https://www.vmware.com/us/security/advisories/VMSA-2017-0008.html

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4907

More research

Richard Tan · 14 October 2026 · 6 min read

How Do You Pentest an AI When All You Have Is a Phone Number?

When performing LLM testing, we generally start with somewhere you can type. For this one though, all we had was a phone number.

Richard Appleby · 5 October 2026 · 8 min read

Stealing Auth Tokens Through the WebView Bridge

A JavaScript bridge with no origin check and a navigation policy with no host allowlist — how two missing lines of code chain into silent account takeover on iOS and Android.

All research