Session Appears Down in XenApp Farm and Csrss.exe Process Remains Active in Session

Session appears in astate in the XenApp farm. Csrss.exe process remains active in the session. This generally means that the session had problems on logoff and remains hung until it is manually terminated or the server is restarted. Additionally, if the server has sessions in this state and is...

How to Grant Rights to be able to Manage Computer Accounts using the Provisioning Services Console

This article describes how to delegate rights to the user or group to allow adding workstations to an Active Directory ADdomain using the Provisioning Server console. Background While it is possible to assign AD users or groups to Built-In groups within AD to enable this functionality such as...

Machine Account Password Fails to Update

While configuring Active Directory machine account password management in the virtual disk file properties, the machine account password expires after the determined value timeout without successfully changing...

PT-2024-28897 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is a remote code execution vulnerability. It arises because attackers can bypass restrictions imposed by admin template.php on edited files, allowing them to write code and execute arbitrary commands...

Malicious code in sap-active (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f78117a7c22adb22e2e09e1906545e768ab5e36bbd1a8b4e279b64201c4d3fe9 The OpenSSF Package Analysis project identified 'sap-active' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7493 Malicious code in sap-active (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f78117a7c22adb22e2e09e1906545e768ab5e36bbd1a8b4e279b64201c4d3fe9 The OpenSSF Package Analysis project identified 'sap-active' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39559

An Improper Check for Unusual or Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS Evolved may allow a network-based unauthenticated attacker to crash the device vmcore by sending a specific TCP packet over an established TCP session with MD5 authentication...

CVE-2024-5910

creationtimestamp| type| source ---|---|--- 2024-07-10 21:49:07+00:00| seen| https://t.me/cvedetector/576 2024-07-11 18:30:56+00:00| seen| Telegram/eiA4EV3lx2Xj5K19ERbsqWvZ2LELjbyg0wyACGwCEiaNQ 2024-07-11 19:22:11+00:00| seen| https://t.me/KomunitiSiber/2241 2024-07-11 20:09:42+00:00| seen|...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2024-38080 Microsoft Windows Hyper-V...

Microsoft Active Directory Domain Services Security Vulnerability

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA for managing and organizing resources, users, computers, and other security objects in a network. A security vulnerability exists in Microsoft Active Directory Domain Services. An attacker could exploit the...

PT-2024-4743 · Microsoft · Active Directory Domain Services +3

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the DCOM Remote Cross-Session Activation component of the Windows operating system. This can be exploited by a remote attacker to...

CVE-2024-6387: New OpenSSH RegreSSHion Vulnerability Gives Hackers Root Access on Linux Servers – 700,000+ Linux Boxes Potentially at Risk

Labeled as CVE-2024-6387, the recently discovered vulnerability in OpenSSH has become a serious cause for concern among Linux servers. OpenSSH is a collection of networking tools built on the Secure Shell SSH protocol. It is widely utilized to secure remote logins, manage and administer remote...

OESA-2024-1798 rubygem-activesupport security update

A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing. Security Fixes: A Cross-Site-Scripting vulnerability was found in rubygem ActiveSupport. If the new bytesplice method is...

CVE-2024-1573

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electri...

CVE-2024-1573

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electri...

PT-2024-18143

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97 to 10.97.2 Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 Mitsubishi Electric MC Works64 all versions Description The issue allows a remote unauthenticated attacker to bypass proper authentication and...

SQL Injection Vulnerability in Active Security Monitoring Cloud Platform of Dongguan Tongtianxing Software Technology Company Limited (CNVD-2024-33117)

Dongguan Tongtianxing Software Technology Co., Ltd. is a video security service provider. Dongguan Tongtianxing Software Technology Co., Ltd. active security monitoring cloud platform there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain sensitive information fr...

Juniper Networks Releases Critical Security Update for Routers

Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its routers. The vulnerability, tracked as CVE-2024-2973, carries a CVSS score of 10.0, indicating maximum severity. "An Authentication Bypass Usin...

[SECURITY] Fedora 39 Update: freeipa-4.12.1-1.fc39

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

Metasploit Weekly Wrap-Up 06/28/2024

Unauthenticated Command Injection in Netis Router This week's Metasploit release includes an exploit module for an unauthenticated command injection vulnerability in the Netis MW5360 router which is being tracked as CVE-2024-22729. The vulnerability stems from improper handling of the password...