Rickroll Grad Prank Exposes Exterity IPTV Bug

UPDATE When Township High School District 214 in Illinois got rickrolled all at once across its six different schools just before graduation, it was more than a meticulously executed senior prank. Cybersecurity star-in-the-making and recent high-school graduate Minh Duong found, and was able to...

com.alexkasko.krakatau:krakatau-maven-plugin-test (>=1.0, <=1.1), com.alexkasko.netty:netty-ftp-receiver (>=1.0, <=1.2.3) +4 more potentially affected by CVE-2021-37137 via org.jboss.netty:netty (3.2.8.final)

org.jboss.netty:netty MAVEN version 3.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - com.alexkasko.krakatau:krakatau-maven-plugin-test =1.0, =1.0, =0.12.1, =1.0.0, =1.0.3 - com.emc.ecs:nfsclient...

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

Botan 加密问题漏洞

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan 2.18.1 and earlier versions, which stems from the fact that a generator public key defined by the...

Design/Logic Flaw

In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

How to Customize App Shortcuts with Receiver for Windows

As a Receiver administrator, you can configure Receiver for Windows 4.2.100 to automatically place application and desktop shortcuts directly in the Start menu or on the desktop in a similar way that Receiver for Windows 3.4 Enterprise places them. The new shortcut only mode provides a seamless...

The fallback receiver address could get twice the toSend amount

Handle s1m0 Vulnerability details In that block of code there are 2 external call inside a try/catch statements. In both the catch the toSend amount is transferred to the fallback receiver address effectively transferring twice if the 2 external call fail. Impact In the fulfill function the...

Honeywell (China) Limited Hybrid Alarm Receiver (Professional Edition) SQL Injection Vulnerability

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Alarm Receiver Professional Edition, which can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in Hybrid Alarm Receiver (Professional Edition) at Honeywell (China) Limited (CNVD-2021-46687)

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Answering Machine Professional Edition, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Hybrid Alarm Receiver (Professional Edition) at Honeywell (China) Co.

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Answering Machine Professional Edition, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2021-0534

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2024-11148 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's ipc/mqueue, msg, and sem components can cause a crash when a do mq timedreceive call returns and leaves do mq timedsend to rely on an invalid...

CVE-2021-29508

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender end, an attacker can pass information about a different type for the receiving end. And by doing so allowing the serializer to create any...

A malicious receiver can cause another receiver to lose out on distributed fees by returning false for tokensReceived when receiveRewards is called on their receiver contract.

Handle janbro Vulnerability details Summary A malicious receiver can cause another receiver to lose out on distributed fees by returning false for tokensReceived when receiveRewards is called on their receiver contract. Risk Rating Medium Vulnerability Details A malicious receiver can cause anoth...

Cannot Connect Session Previously Disconnected From Receiver Linux

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When the user tries to reconnect the session that was previously disconnected for Linux from Citrix...

XenApp UNIX Error : Latency Issue with Published Application or Desktops from XenApp for UNIX through Citrix Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. While using Citrix Receiver 3.x to access published application from Citrix XenApp for UNIX, users...

Error: "Login Failed. The address given did not provide a valid App list" in Citrix Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error message is displayed on a smart phone when connecting to Citrix Receiver: “Login...

Receiver for Chromebook Users Cannot Log On to Access Gateway Enterprise Edition

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. Users running the Receiver for Chromebook 1.0 cannot log on to Access Gateway Enterprise Edition...

Receiver for Web Workaround with NPAPI Support Removal in Google Chrome

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The removal of NPAPI support will affect user experience for users who access Citrix Receiver for We...