Error "There is a problem with this Windows Installer package........ Contact your support personnel or package vendor" when Installing Windows Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installation of Receiver fails with the following error, "There is a problem with this Windows...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

WEM agent is not able to connect/synchronize with the WEM Broker Server

ISSUE: WEM Agent is not able to connect and synchronize with the WEM Broker servers ERRORS PRESENT: The WEM Agent session & Debug logs show the following error: Exception - AgentLocalCacheSync. : The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communicati...

No Published resources launching : Error Access Denied

On the VDA server event viewer - "Event: 1050 Connection validation failed on domain for user for reason Unlicensed"...

CVE-2017-10229

Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications subcomponent: Event Viewer. The supported version that is affected is 7.30.562. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

Oracle Hospitality Cruise Materials Management Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Error: “Connection to PVS Soap Server Failed” While SCOM Management Server Tries To Communicate with PVS Servers

Getting the following error when running: Check Requirements and Configuration for Citrix MPPVS: On PVS server search for below logs: C:\ProgramData\Citrix\Provisioning Services MP Agent\mppvsagt.log says “Security Support Provider Interface SSPI authentication failed” On Event viewer seeing logs...

Citrix Store Front MMC console crashes with RSA Authentication Agent 1.0 installed.

Even after uninstalling the RSA Authentication Agent 1.0 we get following error in event viewer logs: Error while creating the Citrix StoreFront Snap-in. Microsoft.Practices.Unity.ResolutionFailedException: Resolution of the dependency failed, type =...

Storefront - generating event viewer warning - " The Receiver for Windows package file could not be found at the path"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Event viewer on storefront server is generating warning event ID 4 " The Receiver for Windows packag...

Error: "An authentication request was made before establishing a web session"

When going through the NetScaler, the following error is seen in the Event Viewer: An authentication request was made before establishing a web session. This typically occurs when sticky load-balancing between client and StoreFront is misconfigured...

Microsoft Event Viewer XML External Entity Injection Vulnerability

Microsoft Event Viewer is a Microsoft program that displays logged errors, informational messages and warnings for application and system messages. An XML external entity injection vulnerability exists in Microsoft Event Viewer version 1.0, which can be exploited by an attacker to obtain sensitiv...

Microsoft Event Viewer 1.0 - XML External Entity Injection

Microsoft Event Viewer 1.0 - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EVENT-VIEWER-XXE-FILE-EXFILTRATION.txt + ISR: ApparitionSec + CVE: CVE-2019-0948 Vendor: ===============...

Microsoft Event Viewer 1.0 XXE Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EVENT-VIEWER-XXE-FILE-EXFILTRATION.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product: ======================== Microsoft Event Viewer...

Microsoft Event Viewer 1.0 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ======================== Microsoft Event Viewer Version: 1.0 The Windows Event Viewer shows a log of application and system messages – errors, informatio...

Microsoft Event Viewer 1.0 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EVENT-VIEWER-XXE-FILE-EXFILTRATION.txt + ISR: ApparitionSec + CVE: CVE-2019-0948 Vendor: ================= www.microsoft.com Product: ========================...

Windows Escalate UAC Protection Bypass

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class MetasploitModule 'Windows Escalate UAC Protection Bypass Via Eventvwr Regist...

Windows Escalate UAC Protection Bypass Exploit

This Metasploit module will bypass Windows UAC by hijacking a special key in the Registry under the current user hive, and inserting a custom command that will get invoked when the Windows Event Viewer is launched. It will spawn a second shell that has the UAC flag turned off. This Metasploit...

Latest Windows UAC Bypass Permits Code Execution

Less than a month after disclosing a Windows User Account Control bypass, researcher Matt Nelson today published another attack that circumvents the security feature and leaves no traces on the hard disk. This time, the bypass relies on Event Viewer eventvwr.exe, a native Windows feature used to...

Error: "Gateway data from the request and the authentication token are not matching"

The following warning is displayed in the Event Viewer: Gateway data from the request and the authentication token are not matching...

Troubleshooting StoreFront propagation issues

StoreFront propagation fails to complete. The issue can manifest itself with any of the following errors: StoreFront Error: "Propagation Failed on One or More Servers" StoreFront Propagation Fails with Event ID: 31 "Could not find a part of the path" StoreFront Error: "Event ID 19 Failed to Get t...