CVE-2019-1411

creationtimestamp| type| source ---|---|--- 2024-02-11 16:07:10+00:00| seen| https://t.me/ctinow/182826...

EventLogCrasher Flaw Not Serviced by Microsoft

Summary: A recently identified vulnerability, known as EventLogCrasher, poses a significant risk to Windows platforms by allowing authenticated attackers to disrupt the Windows Event Log service. This vulnerability affects all iterations of Windows and has yet to be addressed by Microsoft, lackin...

PT-2024-15605 · Code Projects +1 · Code-Projects Fighting Cock Information System +1

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Windows Event Log affected versions not specified Description: A critical issue has been identified, allowing for SQL injection through the manipulation of the type feed argument in t...

Microsoft Windows PowerShell Code Execution / Event Log Bypass Vulnerabilities

Prior work from this researcher disclosed how PowerShell executes unintended files or BASE64 code when processing specially crafted filenames. This research builds on their PSTrojanFile work, adding a PS command line single quote bypass and PS event logging failure. On Windows CL tab, completing ...

Microsoft Windows PowerShell Code Execution / Event Log Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WINDOWSPOWERSHELLSINGLEQUOTECODEEXECEVENTLOGBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Windows PowerShell Built on the...

User session fails to launch session Received an invalid packet during its ?? handshake phase

In System Event log on the VDA a TDICA event 1019 appears. "The Citrix TDICA Transport Driver connection from xxx.xxx.xxx.xxx: to port 443received an invalid packet during its ?? handshake phase" There is however no issue launching the session and no disconnection takes place. In this scenario th...

Unable to open license error recorded in Windows event log

The Windows Event Log frequently shows an error that the license cannot be opened. The following error appears when adding a Citrix license file .lic and checking the event log. Source: CitrixLicensing Event ID: 20754 Error: Unable to open license file. Please ensure that the file exists and is...

503 Error record in event log when try to login Storefront

"Unable to complete your request" error when logging into the Storefront. The operating system event log may record a 503 error as below. LogName: Citrix Delivery Service Source Name: Citrix Receiver for Web Event id: 1 Log Description The remote server returned an error: 503 Server Unavailable...

Elastic Kibana 8.0.x < 8.11.1 Information Disclosure Vulnerability (ESA-2023-25)

Kibana is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

CVE-2023-6063

creationtimestamp| type| source ---|---|--- 2023-11-15 12:43:59+00:00| published-proof-of-concept| https://t.me/itsecnews/3681 2023-11-15 15:20:06+00:00| published-proof-of-concept| https://t.me/truesecator/5087 2023-11-16 09:18:29+00:00| published-proof-of-concept| https://t.me/hackyourmom/5973...

KeyNotFoundException message is shown in storefront event log

The exception message below is thrown out in the event log of storefront VM. An unexpected error occurred retrieving the credentials. System.Collections.Generic.KeyNotFoundException, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=bcc12aa61934e089 The given key was not present in the...

Joining Server Group failed with error "Exception attempting to authorize, TCP error code 10060"

Joining the Server Group failed with the following errors. Studio UI: Please refer to the Windows Event Log on the Authorizer details. Windows Event Log: Citrix Cluster Join Service,1,2201,"Join failed. Exception attempting to authorize. Could not connect to...

CVE-2023-2423

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at...

Design/Logic Flaw

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at...

PT-2023-19486 · Rockwell Automation · Rockwell Automation Armor Powerflex

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Armor PowerFlex affected versions not specified Description: A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors coul...

CVE-2023-2423: Incorrect Calculation

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at...

PT-2023-4360 · Triangle Microworks · Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: The issue is related to incorrect restriction of a directory path with limited access. This can be exploited by a remote attacker to execute arbitrary code in...

Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase

AntiForensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann Method Fi...

The operation is blocked. Session Recording Administrator logging failed

The operation is blocked. Session Recording Administrator logging failed ,when change session recording policies and session recording properties Deselect all the require SSL for application pool of session recording website in iis, issue remains Set...

CVE-2023-21931

creationtimestamp| type| source ---|---|--- 2023-04-21 02:07:48+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8149 2023-04-21 07:55:20+00:00| published-proof-of-concept| https://t.me/dilagrafie/2889 2023-06-09 19:18:50+00:00| seen|...