Design/Logic Flaw

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

CVE-2021-32000 clone-master-clean-up: dangerous file system operations

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

CVE-2021-32000

CVE-2021-32000 is a local privilege issue in the clone-master-clean-up.sh script of the clone-master-clean-up utility. A UNIX symlink following vulnerability could allow local attackers to delete arbitrary files on SUSE Linux Enterprise Server 12 SP3 (1.6-4.6.1 and earlier) and 15 SP1 (1.6-3.9.1 ...

SUSE: Security Advisory (SUSE-SU-2021:2303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unable to unistall VDA software, error - ‘Supportability tools fail with internal error code 1719, failing action was “WixQueryOSInfo”

-When the customer tries toremove the VDA from Programs and Features and get error ‘Supportability tools fail with internal error code 1719, failing action was “WixQueryOSInfo”’ and referred to the CTX about troubleshooting MSI installation issues,https://support.citrix.com/article/CTX226932 -If...

Receiver Clean-Up Utility

Important Notes Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools --- Receiver cleanup utility is not required while upgrading to the Receiver forWindows 4.4 or newer. Receiver for Window...

Acronis: Local Privilege Escalation using System Clean-up functionality

Vulnerability description not provided...

Shipt: Api Token Leaked in [shoppers.shipt.com]

A researcher reported an API key stored in source code that was part of a 3rd party knowledge base integration. The Shipt information security team immediately investigated the report and determined that the API key referenced was a legacy token that was no longer being used. While it didn't...

How to Clean Up Your Old Posts on Twitter, Facebook, and Instagram

These tips and tools will help you scrub your social media profiles clean, or give you a fresh start without giving up your username and followers...

Paying Ransomware Crooks Doubles Clean-up Costs, Report

New research bolsters the often ignored advice to organizations not to pay a ransomware demanded by attackers. The report found paying a ransom to unlock systems can actually cost companies more financially than recovering data themselves in the long run. Research conducted by Vanson Bourne and...

Cisco Data Center Network Manager 11.2.1 - getVmHostData SQL Injection

Cisco Data Center Network Manager 11.2.1 - getVmHostData SQL Injection !/usr/bin/python """ Cisco Data Center Network Manager HostEnclHandler getVmHostData SQL Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 Installer for Windows 64-bit - Release: 11.21 - Release Date:...

How to Remove Client Files Remaining on System after Uninstalling Receiver for Windows

This article is intended for Citrix administrators and technical teams only. NOTE: Receiver for Windows version 4.4 or later does not require these manual steps. Receiver for Windows 4.4 and later no longer requires separate Clean-Up Utility before installing or upgrading over a previously...

Krakow's Commitment to a Sustainable Office and Community

Written by Courtney Hadden, Corporate Sustainability, and Karolina Galeziowska, Krakow Sustainability Team Lead As an essential part of the Internet for over 20 years, Akamai believes it is our responsibility to help create digital experiences that are fast, intelligent and secure, while caring f...

Qualys Cloud Platform 2.37 New Features

This release of the Qualys Cloud Platform version 2.37 includes updates and new features for Security Assessment Questionnaire and Web Application Scanning, highlights as follows. Security Assessment Questionnaire Manager access to all active campaigns – Questionnaire Manager role now has access ...

Debian DLA-1592-1 : otrs2 security update

Two security vulnerabilities were discovered in OTRS, a Ticket Request System, that may lead to privilege escalation or arbitrary file write. CVE-2018-19141 An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS...

Wildpwn - Unix Wildcard Attack Tool

Wildpwn is a Python UNIX wildcard attack tool that helps you generate attacks, based on a paper by Leon Juranic. It’s considered a fairly old-skool attack vector, but it still works quite often. First things first! Read: https://www.exploit-db.com/papers/33930/ Basic usage It goes something like...

Security Bulletin: IBM Sterling Order Management is affected by Apache Struts 2 security vulnerabilities (CVE-2016-3093 , CVE-2016-4436)

Summary IBM Sterling Order Management uses Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2 Vulnerability Details CVEID: CVE-2016-3093 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by the improper implementation of cache used t...

InfoSphere Information Server Manager and the istool command may encounter errors after applying JR55455

Problem After applying JR55455, you might find that the istool command does not work correctly and that you cannot login to the Information Server Manager. Details of the fix for JR55455 can be found in the security bulletin http://www-01.ibm.com/support/docview.wss?uid=swg21982420 Symptom The...

WordPress Clean Up Optimizer Plugin SQL Injection Vulnerability

WordPress is a suite of blogging platforms developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blogging sites on servers with PHP and MySQL.Clean Up Optimizer is one of the plugins that optimizes your WordPress as well as cleans up outdated da...

Fedora 27 : xen (2017-333ea49a63)

xen: various flaws 1490884 Missing NUMA node parameter verification XSA-231, CVE-2017-14316 Missing check for grant table XSA-232, CVE-2017-14318 cxenstored: Race in domain cleanup XSA-233, CVE-2017-14317 insufficient grant unmapping checks for x86 PV guests XSA-234, CVE-2017-14319 Note that...