ASB-A-173516292

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

The mystery of the Silver Sparrow Mac malware

Cyber security company Red Canary published findings last week about a new piece of Mac malware called Silver Sparrow. This malware is notable in being one of the first to include native code for Apples new M1 chips, but what is unknown about this malware is actually more interesting than what is...

CWA for Android: Fail to Launch Apps and Desktops

Applications are enumerated correct, But when you try launch Apps it fails to connect. Error logged during launch is "javax.net.ssl.SSLPeerUnverifiedException: Check that all CAs are compliant and are installed properly" Full trace ======= "2021-01-20T06:57:18.559+0530","TCPSocketFactory","INFO...

CVE-2020-25533

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

PT-2021-11146

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions prior to 4.0 Description: An issue was discovered in Malwarebytes where a malicious application could perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-07240)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox in that if a user downloads a file without an extension on Windows, and then "opens" it in the download panel, the executable will be launched if the...

Receiver didn't send out ICA connection request to the VDA after getting Launch.ica file. Got error "Unknow client error 1110" after 3 or more minutes.

When try to launch desktop, we find ICA file can be downloaded successfully, but CD Viewer doesn't pop up or sometimes CD Viewer can pop up 3 minutes later but show unknown client error 1110 immediately. The only solution is to reset the user profile in the client. The issue is related to specifi...

SSL Error 76: "The security certificate was revoked" When Launching an Application Using NetScaler Gateway

When launching an application using NetScaler Gateway, you receive the following error message: "SSL Error 76: The security certificate "FQDN" serial number XXXXXXXXXXXXX was revoked by "CAName". Reason: REASONFORREVOKING"...

Security update for MozillaFirefox (critical)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:2325-1 Rating: critical References: 1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Products:...

Remote Code Execution(RCE)

firefox is vulnerable to remote code execution RCE. It is possible due to opening an extension-less download which have inadvertently launched an executable instead...

Palo Alto Networks Cortex XDR Agent Security Vulnerability

Palo Alto Networks Cortex XDR Agent is a client software from Palo Alto Networks Malaysia used to check the security of client devices. A security vulnerability exists in Cortex XDR Agent that arises from improper handling that allows a local authenticated Windows user to create files in the...

Error Message Connection to "ip address" has been lost. Please check your network and try again.

When launch app from ADC on Linux workspace app, it shows below error: Connection to "192... - NETWORK" has been lost. Please check your network and try again...

Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting

Stored Cross-Site Scripting vulnerabilities in Themify Portfolio Post = 1.1.5 allow low-privileged users Contributor+ to inject arbitrary Javascript code or HTML in posts where the Themify Custom Panel is embedded. PoC 1. As a contributor, go into "Portfolios" tab from the sidebar and create a ne...

openSUSE Security Update : slurm_18_08 (openSUSE-2020-1969)

This update for slurm1808 fixes the following issues : - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user ...

The OS Big Sur Launch Might Have Slowed Down Macs Everywhere

The issues affected users who didn't upgrade their software, and other Apple services too...

System Management Mode deep dive: How SMM isolation hardens the platform

Ensuring that the platform firmware is healthy and trustworthy is fundamental to guaranteeing that powerful platform security features like Hypervisor-protected code integrity HVCI and Windows Defender Credential Guard are functioning as expected. Windows 10 achieves this by leveraging a...

System Management Mode deep dive: How SMM isolation hardens the platform

Ensuring that the platform firmware is healthy and trustworthy is fundamental to guaranteeing that powerful platform security features like Hypervisor-protected code integrity HVCI and Windows Defender Credential Guard are functioning as expected. Windows 10 achieves this by leveraging a...

The SmartHub Tool

SmartHub v1 Created Date: 12/17/2015 Updated Date: 4/4/2016 Current Version is v1.1 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the...

Citrix Quick Launch v3

Important Note: This tool is for use with XenApp 6.5 /XenDesktop 5.6 and older only. Support for XenApp and XenDesktop 7.5 and later refer toCTX219718. Please note: You can download the required file from the Citrix downloads website by visiting the following...

Citrix Health Assistant - Troubleshoot VDA Registration and Session Launch

Citrix Virtual Apps and Desktops, formerly XenDesktop, fits the enterprise need to bring both VDI and apps into a user-centric experience. Citrix Virtual Apps, formerly XenApp, fits the enterprise need to bring legacy apps into a cloud management environment. Citrix Health Assistantv1.8.3.71...