EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

MAM Enrollment failing with Error Message"Request Failed"

You will see the following error messages in the Secure Hub Logs: 2016-09-06T22:55:17.691+0400INFO 4called for store with error Error Domain=com.citrix.Receiver.AuthManager Code=6 "CAMAuthManErrorCodeOutOfLicences" UserInfo=com.citrix.Receiver.AuthManager.DiagnosticDescription=The gateway is out ...

DEBIAN-CVE-2015-8341

The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service memory and disk consumption by starting domains...

leak of main per-domain vcpu pointer array

ISSUE DESCRIPTION A domain's primary array of vcpu pointers can be allocated by a toolstack exactly once in the lifetime of a domain via the XENDOMCTLmaxvcpus hypercall. This array is leaked on domain teardown. This memory leak could -- over time -- exhaust the host's memory. IMPACT A domain give...

某邮件域管理系统通用注入（过万企业邮箱沦陷）

简要描述： 日了Feng狗···跑的好慢 详细说明： intitle:Login to webmail http://hanwang.com.cn/login.php 这个貌似是不存在注入的，但是对应的邮箱域管理的后台登陆有post注入 http://mail.tofine.com:8090/login.php 以及 http://mail.tofine.com:8090/sys/login.php http://mail.kddl.cn:8090/sys/login.php http://mail.cqdc.com:8090/sys/login.php...

CVE-2015-2751

Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service host lock via unspecified domctl operations...

World's largest domain name provider GoDaddy the presence of cross-site request forgery（CSRF）vulnerability-vulnerability warning-the black bar safety net

! Security engineer Dylan Saccomanni recently in GoDaddy domain management console is found on a cross-site request forgery（CSRF）vulnerability, an attacker exploit the vulnerability can control the user in the GoDaddy registered domain name. Godaddy is the world's largest domain name provider,wit...

Fedora 20 : xen-4.3.1-6.fc20 (2013-23251)

Disaggregated domain management security status update, IOMMU TLB flushing may be inadvertently suppressed Lock order reversal between pagealloclock and mmrwlock, Hypercalls exposed to privilege rings 1 and 2 of HVM guests Insufficient TLB flushing in VT-d iommu code Note that Tenable Network...

Disaggregated domain management security status

ISSUE DESCRIPTION Xen supports disaggregation of various support and management functions into their own domains; this is often done for security and robustness reasons. In Xen 4.3 additional functionality was introduced to allow further disaggregation: the Xen Security Modules mechanism was...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Enterprise 1.2 Infrastructure Release Advisory

Red Hat OpenShift Enterprise 1.2 is now available which fixes several bugs and introduces feature enhancements. OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. The OpenShift Enterprise 1.2...

Design/Logic Flaw

The domain management tool rhevm-manage-domains in Red Hat Enterprise Virtualization Manager RHEV-M 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file...

CVE-2012-6115

The domain management tool rhevm-manage-domains in Red Hat Enterprise Virtualization Manager RHEV-M 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file...

PT-2013-1900 · Red Hat · Red Hat Enterprise Virtualization Manager

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization Manager versions 3.1 and earlier Description: The issue affects the domain management tool, specifically when the validate action is enabled, causing the administrative password to be logged to a world-readab...

rhev: rhevm-manage-domains logs admin passwords

The domain management tool rhevm-manage-domains in Red Hat Enterprise Virtualization Manager RHEV-M 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file...

cPanel存在多个安全漏洞

cPanel是一款基于多种语言的空间管理面板，可通过域名来管理整个站点 cPanel存在两个未明安全漏洞，目前没有详细漏洞细节提供 Targeted Security Release 2012-05-31 Announcement cPanel Two Unspecified Vulnerabilities 0 cPanel 11.32.3.19 EDGE cPanel 11.32.3.19 CURRENT cPanel 11.32.2.28 STABLE cPanel 11.32.2.28 RELEASE cPanel 11.32.2.28 LTS cPanel 11.30.6.8 L...

CVE-2011-2664

Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors...

CVE-2011-2664

Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors...