Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...

How to reset Receiver or Citrix Workspace App using the command line

Sometimes it may needto reset Citrix Receiver or Citrix Workspace App to restore the default settings.This article explains how to reset Receiver using the command line...

Seamless Configuration Settings for the Citrix Receiver (Online Plugin) for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article contains information about client-side seamless flags in Citrix Online Plugin 9.0 and...

While Installing Receiver, Users May Encounter an Error: "Setup Cannot Continue Because This Version of Receiver is Incompatible With a Previously-installed Version"

Under certain conditions the installation of a new version of Citrix Receiver may fail and the following error maybe displayed by the Instaler: “Setup cannot continue because this version of Receiver is incompatible with a previously-installed version”...

CVE-2020-13625

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...

Double free

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...

Authorization

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...

Authorization

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

CVE-2020-0065

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...

CVE-2020-0090

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

PT-2020-11431

Name of the Vulnerable Software and Affected Versions Android versions Android SoC Description The issue is related to an improper authorization in the receiver component of the Android Suite Daemon. Recommendations For Android versions Android SoC, update to a version that includes the fix for t...

ONKYO Onkyo TX-NR585 Information Disclosure Vulnerability

The ONKYO Onkyo TX-NR585 is a home audio/video receiver from ONKYO Japan. A security vulnerability exists in the ONKYO Onkyo TX-NR585 using firmware version 1000-0000-000-0008-0000. The vulnerability can be exploited by a remote attacker to read sensitive files with the help of the...

Some Receiver Components Fail to Install and Function After Windows 10 Update

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After upgrading Windows 10 to a new feature update and attempting to install Citrix Receiver or the...

Receiver for Windows 4.12- Size of Icon is Too Small and DPI Settings are Not Passed Through

The size of the icon is too small and the DPI settings are not passed through the Receiver...

Receiver 4.4 Selfservice.exe -terminate Does Not Disconnect Sessions

Citrix receiver 4.4. Selfservice.exe -terminate. When running this command line there is no response of the command other commands appear to work as expected. CTX200337 -Driving the Citrix Receiver Self-Service Plug-in Programmatically...

Keyboard and Language (IME) Does Not Sync from Local to VDA

When the user configures Receiver for Windows Advanced Preferences Keyboard and Language Bar Set "Keyboard" to Yes; Manual switch from "Chinese" to "English" or user "Ctrl + Shift" to switch input Keyboard and Language does not sync from local to VDA...

CVE-2016-11026

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 software. BootReceiver allows attackers to trigger a system crash because of incorrect exception handling. The Samsung ID is SVE-2016-7118 December 2016...

CVE-2019-15218

A flaw was found in the Linux kernel's Siano Mobile Silicon MDTV receiver driver. An attacker, with physical access and a specially crafted USB device, can exploit this vulnerability, creating a NULL pointer dereference and causing the system to crash. The highest threat from this vulnerability i...

How to Disable "Remember my password" Checkbox - Citrix Receiver for Windows

For security reasons, users might want to disable Windows Receiver "Remember my password" checkbox toprevent an automatic logon without credential required...

Citrix Workspace App for Windows Remote Code Execution Vulnerability (CTX251986)

The version of Citrix Workspace installed on the remote host is affected by a remote code execution vulnerability due to incorrect access control. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the remote host. C Tenable Network...