PT-2017-6687

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway devices versions 9.x through 9.3 before Build 68.5 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway devices versions 10.0 through Build 78.6...

Novel Attack Tricks Servers to Cache And Expose Personal Data

LAS VEGAS—Researcher Omer Gil has devised a way to trick a web server into caching pages and exposing personal data. The so-called web caching attack targets sites that use content delivery network CDN services such as Akamai and Cloudflare. These services act as traffic load balancers and revers...

July 20, 2017 – Morning Cyber Coffee Headlines – “British Open” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 20, 2017 - Headlines Carbon Black in the News: The dark web goes corporate...

Superior and safe user experiences with the Akamai Cloud Delivery Platform

Your customers are unique and they all expect fast, secure, personalized digital experiences. They are spread across the world, in regions of varying network connectivity, utilize a plethora of devices and screen sizes - making it challenging to deliver your experiences. By delivering 95 Exabytes...

Fedora 26 : gajim (2017-e6deec5bd0)

Gajim 0.16.8 - Fix rejoining MUCs after connection loss - Fix Groupchat invites - Fix encoding problems with newer GnuPG versions - Fix old messages randomly reappearing in the chat window - Fix some problems with IBB filetransfer - Make XEP-0146 Commands opt-in - Improve sending messages to your...

Deliveroo: Restaurant Delivery - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Deliveroo: Restaurant Delivery published at the 'play' market has multiple vulnerabilities...

UberEATS: Food Delivery - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application UberEATS: Food Delivery published at the 'play' market has multiple vulnerabilities...

Magic Wormhole - Get Things From One Computer To Another, Safely

This package provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories or short pieces of text from one computer to another. The two endpoints are identified by using identical "wormhole codes": in general, the sending machine...

Swiggy Food Order & Delivery - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Swiggy Food Order & Delivery published at the 'play' market has multiple vulnerabilities...

Cisco WebExCisco WebEx Network Recording Player Buffer Overflow Vulnerability

Cisco WebEx Network Recording Player is a U.S. Cisco Cisco company based on the WebEx network recorder network recording file player. A buffer overflow vulnerability exists in Cisco WebEx Network Recording Player. An attacker can exploit this vulnerability by delivering a malicious ARF file to a...

Fedora 24 : gajim (2017-62547837ba)

Gajim 0.16.8 - Fix rejoining MUCs after connection loss - Fix Groupchat invites - Fix encoding problems with newer GnuPG versions - Fix old messages randomly reappearing in the chat window - Fix some problems with IBB filetransfer - Make XEP-0146 Commands opt-in - Improve sending messages to your...

Delivery Controller cannot contact vCenter server after certificate update on vCenter

Delivery Controller unable to contact the vCenter server aftercertificate update onthe vCenter server...

education.gov.scot XSS vulnerability

Open Bug Bounty ID: OBB-248525 Description| Value ---|--- Affected Website:| education.gov.scot Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Telegraph delivers better experience with Image Manager

The Telegraph Media Group TMG is a multi-media news publisher and its titles include The Daily Telegraph, The Sunday Telegraph and The Telegraph website. Today, its site serves more than 380 million pages to over 84 million unique visitors every month across the globe, featuring on average about...

Power Managed Server VDA's does not receive shutdown request

Randomly some of the Power Managed Server VDA's receive a shutdown request approximately 20 mins after the scheduled reboot and do not power on automatically and remain Turned Off. Scout logs detect the following: Some Power Actions are marked as failures by Broker possibly because VDAs are not...

Getting started in sales: Q&A with Eric Erston

Today we're excited to introduce a key leader in Rapid7s sales organization: Eric Erston is Rapid7's senior vice president of sales for the Americas region. He has extensive experience in a variety of sales roles, including leading go-to-market functions for mergers and acquisitions. Prior to...

UBUNTU-CVE-2017-2801

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to...

Google Elevates Security in Android O

Google last week during its I/O event described security tweaks that are part of its upcoming Android O operating system, which is expected to be released later this year. New features are Project Treble and a new permission standard around the feature called Instant App. Also to be introduced wi...

How to Configure Multiple License Types within a Single XenApp and XenDesktop Site

A XenApp and XenDesktop license specifies 3 things: Product, Edition, and Model. Previously, each XenApp and XenDesktop site could only consume one type of license product and model at a time. The 7.14 release of XenApp and XenDesktop now includes support for multiple license products and models...

For the APT organization to use the EPS vulnerabilities in and mention the right vulnerability analysis-vulnerability warning-the black bar safety net

In 2015, FireEye released a Microsoft Office EPS（Encapsulated PostScript in the two vulnerability details. Wherein, a is 0day vulnerabilities, one in the attack a few weeks before playing the patch. Recently, FireEye and Microsoft Office products in the discovery of three new 0day vulnerabilities...