Code injection

A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to access an affected device's operating system. The vulnerability exists because an...

How to disable SSL protocols on XenMobile server

XenMobile Server by default supports SSL protocols TLSv1.0, TLSv1.1, TLSv1.2. We can disable or enable the protocols from the XMS CLI console...

WEM admin console fails to connect with error: Error while connecting to the specified Infrastructure Server

The WEM Administration Console errors out while connecting to the broker with a generic error: "Error while connecting to the specified Infrastructure Server". Looking into the the WEM admin console debug logs %userprofile%\Citrix WEM Console Trace.Log the following error is reported: Exception -...

Cisco ASR 1000 Unauthorized Access Vulnerability

The Cisco ASR 1000 is a system router offered by Cisco. The Cisco ASR 1000 has a security vulnerability in the motherboard console port that allows an attacker to exploit the vulnerability by submitting a special request for unauthorized access to the system...

PowerShdll - Run PowerShell with rundll32 (Bypass software restrictions)

Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. dll mode: Usage: rundll32 PowerShdll,main rundll32 PowerShdll,main -f Run the script passed as argument rundll32 PowerShdll,main -w Start an interactive console in a new window rundll32...

Cisco IOS XE Software for Cisco ASR 1000 Series and cBR-8 Routers Line Card Console Access Vulnerability

A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to access an affected device's operating system. The vulnerability exists because an...

Mobile Stock Trading App Providers Unresponsive to Glaring Vulnerabilities

More than 20 of the most popular mobile trading applications used by consumers and day-traders for securities transactions contain glaring vulnerabilities that could allow attackers to sniff personal data or steal money from accounts. Researchers from IOActive today published a report describing...

PVS XDSW, Error: "(vsan) cannot complete file creation operation"

Symptoms: PVS console returns the error "vsan cannot complete file creation operation". CDF traces show exception "CreateWriteCacheDisk failed to CreateBlankVHD : Citrix.Xip.XipException: A general system error occurred: PBM error occurred during PreProcessReconfigureSpec: pbm.fault.PBMFault;Erro...

Command injection

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ...

CVE-2015-5184

CVE-2015-5184 affects Red Hat JBoss A-MQ/Hawtio console. The vulnerability arises from the Hawtio console’s HTTP response headers: the Access-Control-Allow-Origin header is not restricted, allowing remote attackers to access sensitive information exposed by the console. Functional impact is infor...

Trend Micro Mobile Security Authentication Bypass Vulnerability

Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. An authentication bypass vulnerability exists in versions of Trend...

CVE-2017-14080

Authentication bypass vulnerability in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password...

CVE-2017-14080

Authentication bypass vulnerability in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password...

CVE-2017-11396

Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections...

WSO2 Storage Server XSS Vulnerability

WSO2 Storage Server is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WSO2 API Manager XSS Vulnerability

WSO2 API Manager is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WSO2 Governance Registry XSS Vulnerability

WSO2 Governance Registry is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

XenMobile is unable to identify the group membership of users

Although XenMobile can find both user objects and group objects in Active Directory, XenMobile is unable to enumerate the group membership of user objects. This can result in no MAM resources being deployed unless they are bound to the 'All Users' Delivery Group. You may also find that resources...

WSO2 Identity Server XSS Vulnerability

WSO2 Identity Server is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WSO2 Business Process Server Multiple XSS Vulnerabilities

WSO2 Business Process Server is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...