The vulnerability of the NetScaler Console delivery management service (previously known as NetScaler ADM), the NetScaler SDX (SVM) virtual machine deployment and management platform, and the NetScaler Agent, arises from allowing operations to occur outside of the buffer in memory. This allows an attacker to trigger a service failure.

The vulnerability of the NetScaler Console delivery management service previously known as NetScaler ADM, the NetScaler SDX SVM virtual machine deployment and management platform, and the NetScaler Agent is related to the execution of operations outside the buffer in memory. Exploiting this...

CVE-2024-6948

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

CVE-2024-6948 Gargaj wuhu Slide Editor slideeditor.php unrestricted upload

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

On Entrust? Imperva has your back!

Managing SSL/TLS certificates is a critical yet complex task for any organization. Certificates ensure secure communication between users and your web applications, but maintaining them involves constant vigilance and expertise. From monitoring expiration dates to renewing and deploying new...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution

Summary Salesforce tough-cookie is used by IBM App Connect Enterprise Certified Container for handling cookies. IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in...

Defending Against APTs: A Learning Exercise with Kimsuky

The “evolving threat landscape” is a term we often hear within webinars and presentations taking place across the cybersecurity industry. Such a catch-all term is intended to capture the litany of threat groups and their evolving tactics, but in many ways it fails to truly acknowledge the growth ...

SUSE CVE-2024-40903

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

Recommended Installation Sequence for XenDesktop 4 Hotfixes

This article contains information about the recommended installation sequence for XenDesktop 4 Hotfixes. Note : The PDF file attached to this article shows the sequence in graphic form. Background XenDesktop 4.0 Desktop Delivery Controller DDC software has a number of components, such as Core...

Sessions Disconnecting on XenDesktop 7.x and NetScaler 10.x with Session Reliability Enabled

Session Reliability is configured and enabled and when user connections are going througha NetScaler 10.x Device their sessions aredropping or disconnecting. By-passing the NetScaler 10.x device allows user sessionsto not disconnect or drop. Disabling the Session Reliability feature also allows...

Reconfigure XenDesktop Desktop Studio when Installed as a Standalone on a Remote Server

When you install Desktop Studio by itself on a remote server, that is, without the controller role installed locally, the first time you start the Desktop Studio Console, you are prompted to select which Desktop Delivery Controller DDC you want to connect, as displayed in the following screen sho...

Error "Failed to create the Credential Wallet replication channel" after Upgrading StoreFront to Version 3.0.0.44

After upgrading previous versions of StoreFront to version 3.0.0.44 the following issues can be seen. Event Viewer Applications and Services Logs Citrix Delivery Services log: Level: Error, Source: Citrix Credential Wallet Service, Event ID: 1, Task Category 2302 Error Text:Failed to create the...

ROS-20240712-01

Vulnerability in Multiline RFC 2231 component of Exim mail server is related to incorrect analysis of the the multiline RFC 2231 header file name. Exploitation of the vulnerability could allow an attacker, acting remotely, to deliver executable attachments to end-user mailboxes...

Error: "Unable to Create Deployment" on StoreFront

The installation of StoreFront fails and the error message “Unable to Create Deployment ” is displayed on the console: The following are the Event Viewer Errors: Source: Citrix Delivery Services AdminEvent ID: 1Description:...

DEBIAN-CVE-2024-40903

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Product Delivery Date for WooCommerce – Lite versions = 2.7.2...

WordPress Product Delivery Date for WooCommerce – Lite Plugin <= 2.7.2 is vulnerable to Broken Access Control

Software Product Delivery Date for WooCommerce – Lite Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38702 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a611019beea2 Credits...

CVE-2024-6151

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS...

CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS...

CVE-2024-5491

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler...

Citrix Systems NetScaler ADC and Citrix Systems NetScaler Gateway Security Vulnerabilities

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Systems NetScaler ADC are both products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to enable user...