Security Bulletin: Vulnerabilities in Mozilla Network Security Services (NSS) affect IBM MQ Appliance (CVE-2016-2834, CVE-2016-5285, CVE-2016-8635)

Summary Security vulnerabilities in Mozilla Network Security Services NSS affect IBM MQ Appliance. IBM MQ Appliance has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2834 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote...

Platypuses and Policies: Akamai's Approach to the GDPR and Information Security

Written by Meyer Potashman On May 25, 2018, the EU General Data Protection Regulation GDPR went into effect. In preparation, Akamai, like every other company that does business with or interacts in any way with individuals in the EU, needed to re-evaluate our approach to data protection and priva...

Error: "Cannot Complete Your Request" Due to Citrix Delivery Services Authentication App Pool Misconfiguration on StoreFront

The following error is displayed due to Citrix delivery services authentication app pool misconfiguration on StoreFront: Cannot Complete Your Request...

Mail.ru: Reflected XSS in delivery-club.ru

Reflected XSS via GET argument. On the time of reporting, XSS in delivery-club.ru are not covered with bug bounty program...

Exploit for Out-of-bounds Write in Microsoft

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPU...

BeaconMedaes Scroll Medical Air Systems TotalAlert Web Application Information Disclosure Vulnerability (CNVD-2018-10605)

BeaconMedaes Scroll Medical Air Systems is a medical surgical air system from BeaconMedaes, Inc. and TotalAlert Web Application is a web-based management program. A security vulnerability exists in the TotalAlert Web Application in the BeaconMedaes Scroll Medical Air Systems. An attacker could...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

bigpockets.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-619806 Description| Value ---|--- Affected Website:| bigpockets.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Citrix License Server system clocks is not synchronized with the Delivery Controller

If the system clock time difference between Delivery Controller and License Server is is greater than maximum allowed 5 minutes, License Server might not work properly...

Delivery Controller cannot get License Server site information

The Delivery Controller cannot obtain the License Server site configuration. No License Server is registered...

The Citrix License Server certificate is not in the Delivery Controller's trusted root store

License Server certificate not in the Delivery Controller's trusted root certificate store. This will impact Studio and Director managing and displaying information from the license server...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Arbitrary Code Execution Vulnerability

Citrix Systems NetScaler Application Delivery Controller ADC and NetScaler Gateway Management Interface are products of Citrix Systems, Inc. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway Management Interface is a secure remote acce...

Cisco Firepower System Software detection engine remote security bypass vulnerability (CNVD-2018-11286)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. detection engine is an intrusion detection engine. A security vulnerability exists in the way the SMB protocol of the detection engine in Cisco Firepower System Software handles large file transfer failures. A...

Introducing New WhoAmI Tool DNS Resolver Information

The Domain Name System DNS tools “whoami.akamai.net” and its alias “whoami.akamai.com” have been used for many years, often as a step in the process for diagnosing how a content delivery network CDN is directing traffic, locality, and network reachability issues. Whoami was originally introduced ...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

AutoTTP - Automated Tactics Techniques & Procedures

Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide APIs like...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

Threat Outbreak Alert RuleID32722: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57826 First Published: 2018 May 8 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32722 may contain the following files: Name | Size ...