2867 matches found
subscription-manager bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
RHEL 7 : Satellite 6.7 . (Important) (RHSA-2020:1454)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1454 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring...
Semrush: Broken validation of user Id for JWT Token
Traffic Analytics Tool TA uses JWT tokens to store user subscription information without any kind of personal information. JWT tokens are created by passing a user ID. There was an error with validation of user Id for JWT token...
Important: Red Hat Security Advisory: Satellite 6.7 release.
An update is now available for Red Hat Satellite 6.7 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Apple App Store Riddled With Money-Sucking Fleeceware Apps
Researchers are warning iPhone users of fleeceware apps after finding more than 30 examples of them on Apple’s App Store. Fleeceware is jargon for apps that trick users into paying excessive fees for basic applications and functionality that is available free elsewhere. Many of these fleeceware...
Domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2
Domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2 Symptoms Assume that a domain consists of Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 servers and clients. Additionally, an event subscription manager list that is...
Microsoft Office for Mac 2011 14.5.1 update
Describes the Microsoft Office for Mac 2011 14.5.1 update. This update was released on May 19, 2015.Microsoft has released the Microsoft Office for Mac 2011 14.5.1 update. In addition to the application improvements that are mentioned in this article, Office for Mac 2011 is now available as a...
CVE-2020-1978
TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability HA inadvertently collect Azure dashboard service account credentials. These credentials are equivalent to the credentials associated with the Contributor role in...
SUSE-SU-2020:0856-1 Security update for SUSE Manager Server 3.2
This update fixes the following issues: py26-compat-salt: - Replace pycrypto with M2Crypto as dependency for SLE15+ bsc1165425 redstone-xmlrpc: - Disable external entity parsing 1790381, bsc1164120, CVE-2020-1693 - Do not download external entities 1555429, bsc1085414, CVE-2018-1077 spacecmd: -...
Support for Citrix ADC on Azure – Subscription license with hourly price
Citrix provides support for Citrix ADC Subscription based offering subscription license with hourly price on Azure. For builds greater than or equal to Build 13.0.67.43 To file a support case, you need to present support PIN code of Citrix ADC subscription based offering that you have deployed on...
Public cloud provisioning for on-premises Citrix Virtual Apps and Desktops
Questions and Answers What's New in 2024? In March of 2024, Citrix announced new subscription types - Citrix Universal Hybrid Multi-Cloud, Citrix Platform License, and Citrix for Private Cloud. The Citrix Universal Hybrid Multi-Cloud and Citrix Platform License subscriptions are built to run Citr...
subscription-crates.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1111788 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting subscription-crates.com...
U.S. Dept Of Defense: Domian Takeover in [███████]
Summary: subscription of ████ is expired so any attacker can takeover it Impact phishing attacks if any attacker takeovr the domain...
Nextcloud server server-side request forgery vulnerability
Nextcloud is a client-server software suite for creating network hard disks. A server-side request forgery vulnerability exists in Nextcloud Server 16.0.1. An attacker could use this vulnerability to detect local and remote services when adding a new subscription in the Calendar application...
Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Information Disclosure vulnerability CVE-2019-4628
Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4628 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to obtain sensitive information due to incomplete filtering of user input...
Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Input validation vulnerability CVE-2019-4627
Summary An Input validation vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4627 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th...
Huawei EulerOS: Security Advisory for subscription-manager, python-rhsm (EulerOS-SA-2016-1069)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Persistence – WMI Event Subscription
Windows Management Instrumentation WMI enables system administrators to perform tasks locally and remotely. From the perspective of red teaming WMI can be used to perform… Continue reading - Persistence - WMI Event Subscription...
‘Fleeceware’ Apps Downloaded 600M Times from Google Play
Google has made a concerted effort in recent months to try to eliminate bad apps for its Android mobile platform on the Google Play store—something the company historically has battled. However, fleeceware apps—which trick users into paying excessive amounts of money for simple apps with...
