Code injection

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

CVE-2016-5433 affects Citrix iOS Receiver prior to 7.0, where TLS certificate validation can be incorrectly performed. The vulnerability is described in sources noting that all versions before 7.0 are affected and that upgrading to Citrix iOS Receiver 7.0 or later mitigates the issue. Connected d...

PT-2016-6428

Name of the Vulnerable Software and Affected Versions Citrix iOS Receiver versions prior to 7.0 Description The issue allows attackers to cause TLS certificates to be incorrectly validated. Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue...

CVE-2016-5433: Improper Input Validation

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

Process Shows "Starting Application", Freezes When Launching Applications from Receiver for iOS or From Browser on iOS Devices

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to launch an application from and iOS device using the browser or the Citrix Receiver, t...

Error: "Cannot add account" When Connecting Through iOS Receiver 6.1.4

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is received when connecting through iOS Receiver 6.1.4: "Cannot add account" The...

Linux x86_64 Information Stealer Shellcode

Linux x8664 Information Stealer Shellcode. Shellcode exploit for linx86-64 platform / Title : Linux x8664 information stealer Date : 23-05-2016 Author : Roziul Hasan Khan Shifat Tested On : Ubuntu 14.04 LTS x8664 Contact : [email protected] / / How does this shellcode works...

Linux/x86-64 - Information Stealer Shellcode (399 bytes)

/ Title : Linux x8664 information stealer Date : 23-05-2016 Author : Roziul Hasan Khan Shifat Tested On : Ubuntu 14.04 LTS x8664 Contact : email protected / / How does this shellcode works ----------------------------------- 1. First it connects to the information reciver 2. then it download a sh...

Citrix Receiver Error "Unable To Login" When Connecting To StoreFront With SSON Enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When users attempt to run an applicationfrom Citrix Receiver they are presented with an error messag...

ICA Connection Stuck at "Connection in Progress" on StoreFront

When users launch an application from the Receiver for web, after getting the ICA file to the connection, the progress bar gets stuck at"Connection in Progress". The VDAs in this scenario are PVS provisioned machines, which works only for few initial hours post the reboot...

How to suppress the Add Account window in Citrix Receiver 4.4 or earlier for Windows

This article describes how to suppress the Add Account window in Citrix Receiver for Windows. Note : This article is applicable for Receiver 4.4and earlier. For Receiver for Windows 4.4.1000,Receiver 4.5and later, refer to CTX135438 -How to Suppress the Add Account Window in Citrix Receiver for...

How to configure Desktop or Start Menu shortcuts With Citrix Receiver 4.x

Steps to configure Desktop or Start Menu shortcuts...

Receiver pass through is failing with Storefront when we are trying to launch application across domains/forests.

We have two domains “Domain1.com" and "Domain2.com" in different forest. External two way trust relationship exists between 2 domains. XenApp and XML servers are in “Domain2.com" domain and Store front servers are in “Domain1.com" domain. Few users in "Domain1.com" domain is part of a global grou...

How to make a session that spans multiple monitors with Linux Receiver

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. This article explains how to make a session that spans multiple monitors with Linux Receiver...

Application Enumeration Fails When Connecting Through Windows App Receiver and NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Application enumeration fails when connecting through Windows App Receiver and NetScaler Gateway...

Logitech Unifying Receiver Key Injection (MouseJack)

The remote Windows host has used a Logitech Unifying Receiver wireless USB device with firmware version 12.01 or 12.03. It is potentially affected by a wireless key injection vulnerability that allows a physically local attacker to send keystrokes to the host. Note that Nessus cannot determine wh...

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...

CVE-2016-1612

The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact vi...

CVE-2016-1612

The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact vi...