OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory. - Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to...

Does domain passthrough authentication work with NetScaler Gateway?

Question: Does domain pass through authentication work with NetScaler Gateway, like forwarding the windows machine credentials so that user do not have to login and does single sign onlatest update for 12.0.58.x? Answer: No, Domain pass through does not work with Netscaler Gateway. Authentication...

[SECURITY] Fedora 24 Update: shiro-1.3.2-1.fc24

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session managemen t, single sign-on and cryptography services...

The vulnerability of the Windows operating system, which allows a hacker to crack the password

The vulnerability of the Windows operating system is related to incorrect checking of NTLM SSO requests for MSAs. Exploiting this vulnerability allows a malicious actor to select a password by using brute-force attacks on NTLM password hashes...

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...

[SECURITY] Fedora 25 Update: shiro-1.3.2-1.fc25

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session managemen t, single sign-on and cryptography services...

[SECURITY] Fedora 24 Update: distribution-gpg-keys-1.7-1.fc24

GPG keys used by various Linux distributions to sign packages...

Windows Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows fails to properly validate NT LAN Manager NTLM Single Sign-On SSO requests during Microsoft Account MSA login sessions. An attacker who successfully exploited the vulnerability could attempt to brute force a user’s NTLM password hash. To...

September 13, 2016 — KB3185611 (OS Build 10240.17113)

None None...

Apple iCloud Desktop Client 5.2.1.0 Credential Disclosure

Apple iCloud Desktop Client v5.2.1.0 Local Credentials Disclosure After Sign Out Exploit Tested on Windows Windows 7 64bit, English Vendor Homepage @ https://www.apple.com/ Product Homepage @ https://support.apple.com/en-us/HT204283 Date 07/09/2016 Bug Discovery by: Yakir Wizman...

Installer Error: "This installation cannot be updated automatically." or "Unable to proceed with the setup"

Challenge When attempting to update Veeam software, the following error occurs: This installation cannot be updated automatically. Please contact Veeam customer support for assistance with manual update. Alternatively, the following error occurs: An error has occurred: Unable to proceed with the...

Airbnb: ████ discloses valid Airbnb SSO login names via Google Search Results

Hello, There is an Information leakage type weakness present on ███████ which supposedly works as a Single Sign On SSO gateway for Airbnb's corporate services. The weakness is present due to lack of robots exclusions policy file robots.txt present on this domain which allows web crawlers such as...

Instacart: Brute force login and bypass locked account restrictions via iOS app

When logging in to an account on the website, a user's account gets locked out after 15 tries to prevent an attacker from brute forcing access to the account. These same restrictions do not apply to the mobile sign-in endpoint a POST request to https://www.instacart.com/oauth/token, which allows ...

my.luckymarble.com XSS vulnerability

Open Bug Bounty ID: OBB-174317 Description| Value ---|--- Affected Website:| my.luckymarble.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple OS X bsdiff Integer Sign Error Vulnerability

Apple OS X is a specialized operating system developed for Mac computers. An integer sign error vulnerability exists in the bspatch.c file in bsdiff used by Apple OS X, which can be exploited by a remote attacker to crash an application or execute arbitrary code by building a special patch file...

Unable to Change Expired Passwords in Wyse Thin Client

When a user's password expire and they reach out to Internal IT support department,thepassword is changed for the user and ashot password is given. 2. When the user then enters his new password and instead of being allowed to log on and change his password, they get "Citrix Sign on failed". On...

Harvest: CSRF token fixation in Sign in with Google

Hi There is CSRF token fixation in Sign in with Google at https://id.getharvest.com/sessions/new The state parameter is same for any time login https://id.getharvest.com/oauth2/callback?state=%7B%22intent%22:%22sign-in%22%7D&code=code Steps to reproduce 1. Go to...

Critical: Red Hat Security Advisory: Red Hat Single Sign-On security update

A security update is now available for Red Hat Single Sign-On 7.0 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Symantec Ghost Solutions Suite Denial of Service Vulnerability - Windows

Symantec Ghost Solutions Suite is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Troubleshooting Checklist: In Secure Mail, a “Verify your Single Sign-On credentials” error appears

Do the following: 1. Collect the Secure Mail application logs. 2. If you see the following message in the client logs, set clientCertificateMappingAuth to enabled in IIS on the Exchange Server. For more information, refer to the FAQ section of the Secure Mail Test Application. AUTH Request...