CVE-2017-2361: Improper Neutralization of Input During Web Page Generation

An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer" component, which allows XSS attacks via a crafted web site...

MMS settings - Data Help - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MMS settings - Data Help published at the 'play' market has multiple vulnerabilities...

New Relic: Sensitive information disclosure

I am able to download ciritcal files which include newrelic environment setup, setting uo of database which also says which database is used etc. I am able to access this information using a google dork Google dork:site:newrelic.com ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw |...

Apple macOS Sierra Help Viewer Cross-Site Scripting Vulnerability

Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers.Help Viewer is a WebKit-based HTML viewer. A cross-site scripting vulnerability exists in Help Viewer in Apple macOS Sierra. An attacker can exploit the vulnerability to execute arbitrary code with specially...

F5 BIG-IP SSL Virtual Server - Ticketbleed Memory Disclosure

F5 BIG-IP SSL Virtual Server - Ticketbleed Memory Disclosure / Exploit Title: Ticketbleed CVE-2016-9244 F5 BIG-IP SSL virtual server Memory Leakage Date: 10.02.2017 Exploit Author: Ege Balcı Vendor Homepage: https://f5.com/ Version: 12.0.0 - 12.1.2 && 11.4.0 - 11.6.1 Tested on: Multiple CVE :...

Error: "The Gateway has EPA enabled, which is not supported on iOS devices" on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when logging on to iOS Receiver: The Gateway has EPA enabled, which...

Easy Support Tools 1.0 SQL Injection

Exploit Title: Easy Support Tools - FAQs, Help Articles, Blog and Feedback Script v1.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy: https://codecanyon.net/item/easy-support-tools-faqs-help-articles-blog-and-feedback/17864522 Demo:...

macOS 10.12.x < 10.12.3 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.3. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - Bluetooth - Graphics Drivers - Help Viewer - IOAudioFamily - Kernel - libarchive - Vim - WebKit Note that successfu...

About the security content of macOS Sierra 10.12.3

About the security content of macOS Sierra 10.12.3 This document describes the security content of macOS Sierra 10.12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

help-aircanada.com XSS vulnerability

Vulnerable URL: https://help-aircanada.com/aircanada-help/createIssue.do?lang=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 727900...

Citrix Receiver Installation NOT successful for 'XenApp Web Plug-in', error: 1612

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information After uninstalling Receiver for Windows, re-installation fails with the following error: Installation N...

Receiver for Chrome Error: Invalid command line arguments: Unable to open the file as it has an unsupported extension

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When a user attempts to open a file directly from Google Drive, they may receive the following error...

MS12-046: Description of the security update for Office 2010 (Vbe7.dll): July 10, 2012

MS12-046: Description of the security update for Office 2010 Vbe7.dll: July 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-046. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS10-105: Description of the security update for Microsoft Office 2010: December 14, 2010

MS10-105: Description of the security update for Microsoft Office 2010: December 14, 2010 Introduction Microsoft has released security bulletin MS10-105. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

holidayautos.co.uk XSS vulnerability

Vulnerable URL: https://www.holidayautos.co.uk/help/'"--!...

Storefront - generating event viewer warning - " The Receiver for Windows package file could not be found at the path"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Event viewer on storefront server is generating warning event ID 4 " The Receiver for Windows packag...

How to Silently Remove and Clean-up Application Shortcuts from Citrix Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. To have the Citrix Receiver silently remove application shortcutsfrom their Citrix Receiver thatthe...

CentOS 7 : gimp / gimp-help (CESA-2016:2589)

An update for gimp and gimp-help is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Users not Being Prompted for Citrix Receiver Upgrade Upon Logon to Storefront Web URL

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users not being prompted to upgrade Citrix Receiver when it is available...

Error: General error while launching applications through android receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Getting following error when launching applications through android receiver when coming through...