Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.19 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

[SECURITY] Fedora 26 Update: poco-1.7.8p3-3.fc26

The POCO C++ Libraries POCO stands for POrtable COmponents are open source C++ class libraries that simplify and accelerate the development of network-centric, portable applications in C++. The POCO C++ Libraries are built strictly on standard ANSI/ISO C++, including the standard library...

Your startup disk is almost full – How you can fix it on your Mac

Every Mac user will experience the message “Your startup disk is almost full” at one time or another. Understanding what “startup disk is full” actually means is the first important step before you can fix this issue. What if my Mac’s Startup Disk is Full? The answer to this question is easy. Whe...

NetScaler Gateway is Unable to Access XenApp Applications

XenApp and XenDesktop are placed behind the NetScaler Gateway. User attempts to access the application and get the below error message: Unable to launch applications. Contact your helpdesk...

[SECURITY] Fedora 27 Update: poco-1.7.8p3-3.fc27

The POCO C++ Libraries POCO stands for POrtable COmponents are open source C++ class libraries that simplify and accelerate the development of network-centric, portable applications in C++. The POCO C++ Libraries are built strictly on standard ANSI/ISO C++, including the standard library...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 22, 2018

Yesterday, the Zero Day Initiative ZDI announced the dates and contest rules for Pwn2Own 2018. Last year, we celebrated the 10th anniversary of the event and the 11th year is going to be bigger than ever! Pwn2Own will be returning to Vancouver, BC, at the CanSecWest Conference on March 14-16, 201...

ManageEngine OpManager / Applications Manager / IT360 -FailOverServlet Multiple Vulnerability

Exploit for multiple platform in category web applications Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security...

Electron Protocol Handler Remote Code Execution (CVE-2018-1000006)

A remote code execution vulnerability exists within Electron Protocol Handler. This is due to the way Electron registers Windows applications as the default handler for a protocol. A successful attack could lead to a remote code execution on the effected system...

Apache Hadoop 2.7.3 - 2.7.4 YARN NodeManager Information Disclosure Vulnerability

Apache Hadoop is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"...

Skype, Slack and Other Popular Windows Apps Vulnerable to Critical Framework Bug

UPDATE Hundreds of software applications built using the developer framework called Electron may be vulnerable to a remote code execution flaw, according to developers of the framework. Impacted are dozens of popular Windows applications such as Microsoft’s Skype for Windows and Slack. Earlier th...

Deserialization Attacks Surge Motivated by Illegal Crypto-mining

Imperva’s research group is constantly monitoring new web application vulnerabilities. In doing so, we’ve noticed at least four major insecure deserialization vulnerabilities that were published in the past year. Our analysis shows that, in the past three months, the number of deserialization...

CVE-2017-15718

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications...

Improved Control Over the Remote Language Bar for Seamless Published Applications

Introduction This feature enhancement first appears in the XenApp and XenDesktop 7.17 Product Release. Code changes to support this feature were required in Windows VDA version 7.17 and Receiver for Windows 4.11. Using the Receiver for Windows UI, users can now configure whether they want to...

[SECURITY] Fedora 27 Update: python-bottle-0.12.13-1.fc27

Bottle is a fast and simple micro-framework for small web-applications. It offers request dispatching Routes with URL parameter support, Template s, a built-in HTTP Server and adapters for many third party WSGI/HTTP-server a nd template engines. All in a single file and with no dependencies other...

[SECURITY] Fedora 26 Update: python-bottle-0.12.13-1.fc26

Bottle is a fast and simple micro-framework for small web-applications. It offers request dispatching Routes with URL parameter support, Template s, a built-in HTTP Server and adapters for many third party WSGI/HTTP-server a nd template engines. All in a single file and with no dependencies other...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component

Oracle Communications Applications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management component. A security vulnerability exists in the Portal subcomponen...

IBM Curam Social Program Management Privilege Gain Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A security vulnerability exists in IBM Curam SPM. An attacker could exploit the vulnerability to revoke applications...

Unspecified Vulnerability in Oracle FLEXCUBE Direct Banking Component (CNVD-2018-01715)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Direct Banking is an Internet and mobile banking solution component. A security vulnerability exists in the Logoff...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component (CNVD-2018-01704)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

CVE-2018-1362

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380...