October 11, 2016 — KB3192440 (OS Build 10240.17146)

None None...

Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...

Secure Hub could not connect to Store

Some users unable to open Store, getting error message Store could not connect...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

How to Prevent Secure Hub Uninstallation on Android and iOS Devices

This article describes different methods torestrict the Secure Hubapp removal from the enrolled device...

Error: "SHTP0003: A required parameter is missing. User or Password missing" on Secure Hub

We have a XenMobile environment and we can enroll iOS devices and deploy applications successfully. However, when we use an Android device, the enrollment completes successfully, but applications will not install. On the Android device the applications are greyed out with a spinner and there is a...

SUSE-SU-2016:2006-1 Security update for Linux Kernel Live Patch 12 for SLE 12

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

CVE-2015-8816

The hubactivate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service invalid memory access and system crash or possibly have unspecified other impact ...

Troubleshooting Checklist: Cannot enroll and authenticate a device using Secure Hub

If a device cannot enroll and authenticate using Secure Hub, ask the following questions: Is the user synced to XenMobile? Are there multiple domains managed? For details on multi-domain configuration in MAM+MDM mode, see this Citrix blog post. Is the Global Catalog port managed? From which domai...

(Pwn2Own) Microsoft Windows Diagnostics Hub Standard Collector Directory Traversal Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Diagnostics Hub Standard Collector. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

Cumulative update for Windows 10: June 14, 2016

None None...

CVE-2016-3231

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

Privilege escalation

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-3231

The CVE-2016-3231 issue affects the Windows Diagnostics Hub Standard Collector Service, where improper handling of the agent DLL path enables local privilege escalation via arbitrary DLL loading. The root cause is unsafe library loading due to not properly sanitizing the input path, allowing an a...

Microsoft Windows Diagnostic Hub Elevation of Privilege Vulnerability (3165479)

This host is missing an important security update according to Microsoft Bulletin MS16-078. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Diagnostics Hub Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...

Microsoft Windows Diagnostics Hub Elevation of Privilege (MS16-078: CVE-2016-3231)

A directory traversal vulnerability exists in Microsoft windows within the Diagnostics Hub component that could allow a privielege escalation. The root cause is that the Diagnostic Hup standard collector service fails to validate a safe path to the agent dll which may be abused to force the...

FAQ: Apple's Device Enrollment Program and Citrix Secure Hub Auto Install

Q: How to download and install Citrix Secure Hub automatically during DEP initial setup without the user searching the AppStore? A : The capability to install Secure Hub during DEP initial setup of a device is supported with XenMobile 10.3.x Server and later: All you need to do is to push the...

File Hub Arbitrary File Upload Vulnerability

File Hub provides easy access to files on iOS Devices, Cloud Services and remote computers. An arbitrary file upload vulnerability exists in File Hub. This allows remote attackers to upload arbitrary files...

Secure Item Hub Persistent Input Validation Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. A persistent input validation vulnerability exists in Secure Item Hub, which could allow a remote attacker to inject malicious persistent script code on the application side of the mobile a...