WhatsApp and Telegram Vulnerabilities Opened Users to Account Takeover

Encrypted messaging services WhatsApp and Telegram patched vulnerabilities in the last week that could have let an attacker take over a user’s account, access personal and group conversations, along with photos, videos and other files. A trio of researchers with Check Point Software Technologies,...

Information Disclosure

ng2-webstorage is vulnerable to information disclosure. This is because the key in local storage is not cleared properly after deletion. The stored sensitive information should be deleted after the deletion of a key remains until the page is refreshed...

Design/Logic Flaw

IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system...

Design/Logic Flaw

IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system...

Error: Logical Volume mount/activate error when trying to plug the Local Storage

After a server crash, the Local storage is unplugged and when trying to plug it back it gives the following error xe pbd-plug uuid=xxxx-xxxxxx-xxxxx-xxxxxError code: SRBACKENDFAILURE52Error parameters: , Logical Volume mount/activate error opterr=FSCK failed on...

CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

Session fixation

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

CVE-2016-4707

CVE-2016-4707 affects CFNetwork in Apple iOS <10 and macOS

UBUNTU-CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

How to attach USB drive as a local Storage on XenServer

To attach a USB drive as a local storage on XenServer Host...

About the security content of iOS 10

About the security content of iOS 10 This document describes the security content of iOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

Error: "Server Still Booting" and XenServer not exiting maintenance mode after unexpected shutdown

After an unexpected shutdown or restart, your XenServer host might experience of the following issues: Hostswith more than 100 days uptime and local storage attached when rebooted can't connect to the local storage. The host doesnot come out ofmaintenance mode. When you try to exit the server fro...

Local Storage Does Not Repair After Reboot of XenServer

Local storage will not repair after XenServer is rebooted...

Target Device has Poor Performance and/or High Retries When Booting to a vDisk in Private Mode

When installing software in private mode it takes a very long time. Booting devices in Standard Mode works as expected Any maintenance version is very slow Best practices are put in place with Large send offloaddisabled on the target and PVS server anddisabled spanning tree on the switch vDisk is...

Red Hat OpenShift Enterprise Certificate Acquisition Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform that builds, tests, deploys, and runs applications.OpenShift Enterprise is an open source version of the private cloud. Red Hat OpenShift Enterprise has a security vulnerability that allows a remote attacker to exploit the...

3: Untrusted content loaded via the API proxy can access web console credentials on the same domain

An origin validation vulnerability was found in OpenShift Enterprise. An attacker could potentially access API credentials stored in a web browser's localStorage if anonymous access was granted to a service/proxy or pod/proxy API for a specific pod, and an authorized accesstoken was provided in t...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2016:0175 Updated glibc packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base...