Published Desktop not launching automatically via Netscaler

Desktop was not launching automatically via Netscaler. When tried internally, the desktop was launching automatically...

Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...

nike.com XSS vulnerability

Vulnerable URL: https://www.nike.com/at/launch/?nr=...

Xen Information Disclosure Vulnerability (CNVD-2017-06979)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has an information disclosure...

datenight.guildlaunch.com XSS vulnerability

Vulnerable URL: http://datenight.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:44 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

Command injection

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

PT-2017-18274

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 17 Description The issue allows unprivileged users to launch predefined binaries, replace or delete arbitrary files when Avast Self-Defense is disabled. It can also be exploited in conjunction with other...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

Allowing communication from XenMobile apps to the Launch Darkly Service for feature flags

What are Feature Flags? Feature flags are a quality control measure for Citrix to be able to dynamically roll back to the previous working version of the app before a new feature was introduced. Since a bug fix on the public app stores is subject to delays due to app store submission and approval...

CVE-2017-2675

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

Launches Hosts in AWS

This module will attempt to launch an AWS instances hosts in EC2. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/aws/client' class MetasploitModule "Launches Hosts in AWS", 'Description'...

Session launches in HTML5 instead of native Workspace app/Citrix Receiver

When a user attempts to launch a session from the StoreFront website, the session would be launched automatically via Workspace app for HTML5 instead of native Workspace app...

Application launch results in White screen Through NetScaler Gateway using Windows Receiver 8.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Receiving the ICA File and Clicking on Application Results in White Screen...

CVE-2017-5682: Undefined Security Weakness

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives,...

Pivotal GemFire for PCF Unauthorized Access Vulnerability

GemFire for PCF is a distributed management platform designed by Pivotal for many different data management situations, but is particularly useful for high-volume, latency-sensitive, mission-critical transactional systems. An unauthorized access vulnerability exists in Pivotal GemFire for PCF. An...

Unable to Launch Applications on StoreFront Through Thin Clients

When the user clicks on the application icon on StoreFront to launch it, nothing happens and the application fails to launch...

CVE-2015-7494

A vulnerability has been identified in IBM Cloud Orchestrator services/action/launch API. An authenticated domain admin user might modify cross domain resources via a /services/action/launch API call, provided it would have been possible for the domain admin user to gain access to a resource...

CVE-2015-7494: Improper Access Control

A vulnerability has been identified in IBM Cloud Orchestrator services/action/launch API. An authenticated domain admin user might modify cross domain resources via a /services/action/launch API call, provided it would have been possible for the domain admin user to gain access to a resource...

PT-2017-7206

Name of the Vulnerable Software and Affected Versions IBM Cloud Orchestrator affected versions not specified Description A security issue allows an authenticated domain admin user to potentially modify cross-domain resources. This can be achieved by making a call to the "/services/action/launch"...