PT-2024-6556 · Rockwell Automation · Rockwell Automation Sequence Manager

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Sequence Manager affected versions not specified Description: The issue is related to an input validation problem that could allow a malicious user to send malformed packets to the server, resulting in a denial-of-service...

CVE-2024-37386

An issue was discovered in Stormshield Network Security SNS 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2...

CVE-2024-37386

An issue in Stormshield Network Security (SNS) (versions 4.0.0–4.3.25, 4.4.0–4.7.5, and 4.8.0) allows certain manipulations to restart the system in single-user mode even when Secure Boot is active. To remediate this vulnerability, users should update to the following fixed versions: 4.3.27 , 4.7...

XenApp Target Device Does Not Respond and Displays a Gray Screen

XenApp Target Device appears to be unresponsive. Background When the Provisioned XenApp server is accessed through the local console, you see a gray blank screen. There are different symptoms reported for the same incident and they are not specific to Provisioning services or XenApp. In some case...

Session Timeout are Not Applied on StoreFront Servers

Session timeout are not applied on the StoreFront servers. When a user tries to log on or launch an application the following error is displayed: Logon has expired. Restarting the Wallet services and upgrading to StoreFront 2.6 did not resolve the issue...

Disable Restart Button While Desktops are Restarting

This article describes how to configure the StoreFront to ignore clicks on “Restart” while desktop is powering off and while it is powering on again. Background When the user’s desktop is restarting, there might be issues if they repeatedly click on the desktop...

How to Enable HTML5 Connections to Provisioning Services Based Catalogs

Enabling connections from Receiver for HTML5 to desktops deployed using Provisioning Services. Background Enabling connections from Receiver for HTML5 to desktops in Provisioning Services PVS based catalogs might require additional steps to complete depending on the persistence of the write cache...

Session Appears Down in XenApp Farm and Csrss.exe Process Remains Active in Session

Session appears in astate in the XenApp farm. Csrss.exe process remains active in the session. This generally means that the session had problems on logoff and remains hung until it is manually terminated or the server is restarted. Additionally, if the server has sessions in this state and is...

CVE-2024-39540

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When an affected device receives specif...

CVE-2024-39549

CVE-2024-39549 affects Junos OS and Junos OS Evolved. A crafted BGP Path attribute update can trigger a Missing Release of Memory after Effective Lifetime in the routing process daemon (rpd), causing memory to be allocated but not freed in all paths and leading to a DoS. Impact is memory exhausti...

CVE-2024-39528

CVE-2024-39528 — AUse After Free in Juniper Junos OS/Junos OS Evolved Routing Protocol Daemon (rpd) causes a segmentation fault on a specific sequence (routing-instance deactivation + SNMP request), leading to rpd crash and DoS. Affected: Junos OS and Junos OS Evolved. Reported vulnerable version...

CVE-2024-6036

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

PYSEC-2024-269

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

PYSEC-2024-269

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

CVE-2024-39517 Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon l2ald on Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service DoS. In an EVPN/VXLAN scenario, when a high amount specific...

CVE-2024-6036 Denial of Service in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

CVE-2024-6036

CVE-2024-6036 affects gaizhenbiao/chuanhuchatgpt v20240410. A vulnerability allows any user to restart the server by sending a request to the /queue/join? endpoint with "fn_index":66, leading to service disruption and potential data integrity issues. Several connected sources corroborate the issu...

CVE-2024-6036 Denial of Service in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

CVE-2024-6036 Denial of Service in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

IGEL OS Privilege Escalation (via systemd service)

Escalate privileges for IGEL OS Workspace Edition sessions, by modifying network-manager.service using setupcmd SUID and network, then restarting the service. Module Options msf use exploit/linux/local/igel/networkprivesc msf undefinednetworkprivesc show actions ...actions... msf...