1606 matches found
Cannot start apps. Please run Reset Receiver to resolve a lockdown conflict for LegacyLocalUserNameAndPassword (error 2320).
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Getting following error message while trying to launch application...
CVE-2017-18348
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
Moderate severity vulnerability that affects org.springframework.boot:spring-boot
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
GHSA-XX65-CC7G-9PFP Moderate severity vulnerability that affects org.springframework.boot:spring-boot
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure...
Workspace App for Windows - Error "Cannot start app" intermittently
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Intermittently application launch fails with errors "Cannot start" or "Cannot start app" In Windows...
Citrix Workspace App (CWA) or Receiver for Windows launch fails after Install or upgrade with Real-time Media Engine (RTME) installed
After installing or upgrading Citrix Workspace App or Receiver for Windows on an endpoint with the Real-time Media Engine RTME installed, resource launch fails for any application or desktop. This might also happen on endpoints that have Cisco's VXME installed. CWA or Receiver displays one of the...
Injecting Code into Windows Protected Processes using COM - Part 1
Posted by James Forshaw, Google Project Zero At Recon Montreal 2018 I presented “Unknown Known DLLs and other Code Integrity Trust Violations” with Alex Ionescu. We described the implementation of Microsoft Windows’ Code Integrity mechanisms and how Microsoft implemented Protected Processes PP. A...
How the HTC Exodus Blockchain Phone Plans to Secure Your Cryptocurrency
HTC starts filling in the details of its so-called blockchain smartphone, expected to launch later this year...
Unable to launch the published application.
Unable to launch the published application. The progress window shows the Welcome screen, applying group policies, Citrix Profile management etc and then disappears. No time out or failing errors on the VDA found...
Citrix HDX Engine is not responding
Error "Citrix HDX engine is not Responding" when launching an application on windows embedded device with receiver 4.8/4.10...
Error "The server certificate could not be checked for revocation as required by your SSL policy settings. No certificate revocation providers could be loaded."
When trying to launch published application on Mac machine, we get an error"The server certificate could not be checked for revocation as required by your SSL policy settings. No certificate revocation providers could be loaded."...
Receiver IOS 7.5 - Error launching apps using Citrix receiver 'operation hdxhdk error domain session error 8''
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. User is unable to launch published apps with RfiOS 7.5.6 .Issue on users using Ipad or iphones...
Unable to start application with SAML authentication "Cannot Start App" Event ID 28 Could not contact any Federated Authentication Servers
Launching an application or desktop fails when StoreFront is configured for FAS/SAML authentication. Error seen when user tries to launch an application or desktop: No errors are logged on the FAS server. Storefront will show event ID 28 with error showing "...Could not contact any Federated...
openSUSE Security Update : qemu (openSUSE-2018-894) (Spectre)
This update for qemu to version 2.11.2 fixes the following issues : Security issue fixed : - CVE-2018-11806: Fix heap buffer overflow issue that can happen while reassembling fragmented datagrams bsc1096223. - CVE-2018-3639: Mitigation functionality for Speculative Store Bypass issue in x86...
Crestron Multiple Products CTP Console LAUNCH Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Crestron Crestron's WindowCE-based products. Authentication is required to exploit this vulnerability. The specific flaw exists within the engineer built-in account that enables a hidden 'LAUNC...
Citrix Receiver 4.9 LTSR - Self service mode set to false, desktop icons constantly flashing
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installed Citrix Receiver 4.9 LTSR on some of the test VDAs published desktops and ever since...
Pornhub: Stored XSS in galleries - https://www.redtube.com/gallery/[id] path
Researcher successfully closed the image 'alt' attribute and injected javascript by intercepting the album creation request and submitting an XSS payload as the album title. This led to stored cross-site scripting on the user's album page, executed against any users who visited the album. Stored...
Pornhub: Stored XSS on the https://www.redtube.com/users/[profile]/collections
Researcher successfully closed the image 'alt' attribute and injected javascript by submitting an XSS payload as the collection title. This led to stored cross-site scripting on the user's collections page, executed against any users who visited the user's collections. The user's favorites page w...