He could replace the third-party app itself with an almost identical copy with a built-in backdoor.
PLING STORE CODE
He then writes his own code in the “HTML or Embed media code” field of the third-party listings in order to be able to distribute himself from there. If this person is a developer, the worm can access their listings in the next step. The worm includes code that, as a first step, enables it to hijack the session of the person calling the listing. An attack scenario in which listings of any developer could be contaminated with malicious code would in theory look as follows: The attacker initially creates his own app entry and “hides” his JavaScript payload, an XSS worm, in the one already mentioned Listing input field. The upper field allows adding (malicious) JavaScript code.īräunlein emphasizes in the blog post that the XSS gap is theoretically “wormable”. The application based on the Electron framework Pling-Store (also “PlingStore”, formerly OCS-Store), on the other hand, is intended to facilitate the installation and management of Pling content and is advertised for this purpose by Pling-based app stores. Positive Security mentions other examples, and. Several well-known app stores, such as the KDE Store on.
PLING STORE SOFTWARE
It serves as an alternative download source for themes, icons, desktop backgrounds, software and more for Linux. The Pling platform is part of the portal from hive 01 GmbH. According to the researcher, the Pling Store app can also be used to execute any program code remotely (Remote Code Execution, RCE) on Linux systems under certain conditions. apps available for download, in affected stores and, for example, add malicious code to them. The vulnerability could be misused to manipulate listings, i.e. You can easily activate anyone you like.The security researcher Fabian Bräunlein from Positive Security has discovered a previously unfixed cross-site scripting (XSS) vulnerability in Pling-based Linux app stores, which is also said to affect the native Pling-Store application. From the top of the app, click the directory icon and it’ll show you the currently installed themes.
PLING STORE INSTALL
It’ll take a few seconds to download and install a theme. You can now use GNOME tweak tool to activate it or use the Pling’s download folder to activate it. To install any theme, just click the install button and it’ll download and install automatically. You can select from the thousands of Linux themes & icons. Once you launch the app, you’ll have a user-friendly interface. appimage files in Linux, check out the following article – Appimage from the official website and launch the app. There is a large collection of artwork, themes, icons, apps, add-ons, and music & videos. It is a one-stop-shop for people who want new themes for their desktop.
Pling is a great platform from for all desktop Linux users. Click ‘Themes’ in Unity tweak tool or ‘Appearance’ in GNOME Tweak tool and here you have the theme listed that you moved to the themes directory. When you have moved folder, open Unity tweak tool or GNOME tweak tool that we installed above. $ sudo mv path-of-extracted-theme-folder /usr/share/themes Installing ThemesĮxtract the theme file that you want to install like below.Īfter extracting theme file, open terminal and move extracted folder to /usr/share/themes. Though, you can still use GNOME tweak tool to manage or activate the installed theme. Unity and GNOME tweak tools are available in Software center.Īs Ubuntu’s Unity desktop lives up its life, we can no longer use the Unity tweak tool to manage themes on Ubuntu. To install themes in Linux, you can use Unity tweak tool or GNOME tweak tool.
PLING STORE HOW TO
Today I will show you how to install themes in Linux in the easiest way possible. I have compiled a good collection of Linux themes in the following two articles. Every Linux distribution can be highly customized using the themes that the community has developed for the past many years.
0 kommentar(er)
