MGASA-2016-0430 Updated roundcubemail packages fix security vulnerability

Users can execute commands on the server by writing e-mails, due to insufficient sanitation of the from field when calling PHP's mail function CVE-2016-9920. Note that only roundcubemail installations that don't have an SMTP server configured for mail delivery are affected...

Updated roundcubemail packages fix security vulnerability

Users can execute commands on the server by writing e-mails, due to insufficient sanitation of the from field when calling PHP's mail function CVE-2016-9920. Note that only roundcubemail installations that don't have an SMTP server configured for mail delivery are affected...

Shopify: XSS on manually entering Postal codes

Hello, I had found a XSS vulnerability in manually entering postal codes in "Advance Cash On Delivery" option which is newly launched for indians.Below is the screenshot attached. Thank You...

Shopify: Redirect in adding advance cash on delivery app

Hello, When you install Advance Cash on delivery App in your shop, it takes you to the url F140362 https://.myshopify.com/admin/authorizegateway/1041328?apikey=ceb1a596e2b039d02dfb5772303f6273&returnurl=https://cod.shopifyapps.com/gatewayenabled F140363 Here, returnurl can be used for redirection...

[SECURITY] Fedora 25 Update: jenkins-1.651.3-2.fc25

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...

NTP DoS Exploit Released — Update Your Servers to Patch 10 Flaws

A proof-of-concept PoC exploit for a critical vulnerability in the Network Time Protocol daemon ntpd has been publically released that could allow anyone to crash a server with just a single maliciously crafted packet. The vulnerability has been patched by the Network Time Foundation with the...

adv.mezon.ru Open Redirect vulnerability

Vulnerable URL: http://adv.mezon.ru/www/delivery/ck.php?oaparams=2bannerid=90zoneid=15cb=f849dca24coadest=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...

Nymaim Dropper Updates Delivery, Obfuscation Methods

A new variant of the Nymaim dropper has been identified that includes updated delivery and obfuscation methods, and the use of PowerShell routines to download its payloads. The updated dropper, used primarily to download banking Trojans in the past, has also been spreading ransomware, according t...

Track-POD Proof of Delivery - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Track-POD Proof of Delivery published at the 'play' market has multiple vulnerabilities...

Cross-Site Scripting Vulnerability in Multiple F5 Products

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A cross-site scripting vulnerability exists in several F5 products, which can be exploited by remote attacker...

Threat Outbreak Alert RuleID25383: Email Messages Distributing Malicious Software on September 30, 2016

Medium Alert ID: 49160 First Published: 2016 October 3 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25383 may contain the following files: Name |...

foodora - Finest Food Delivery - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application foodora - Finest Food Delivery published at the 'play' market has multiple vulnerabilities...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...

How to Disable Power Management

To disable power management for a Delivery Group...

Hancitor Downloader Abusing APIs, PowerShell Commands

Developers behind the malicious downloader Hancitor have bolstered the malware again, this time with new delivery approaches that make it more difficult to detect. The downloader is still spread through malicious attachments, and distributing malware designed to steal data, such as Pony and...

CVE-2016-6276

CVE-2016-6276 affects Citrix Linux VDA (formerly Linux Virtual Desktop) prior to 1.4.0. A local attacker can escalate privileges to root via unspecified vectors. The vulnerability is addressed in version 1.4.0 and later; affected customers should upgrade to 1.4.0+ to mitigate. If exploiting detai...

CVE-2016-6276: Undefined Security Weakness

Citrix Linux Virtual Delivery Agent aka VDA, formerly Linux Virtual Desktop before 1.4.0 allows local users to gain root privileges via unspecified vectors...

PT-2016-6816

Name of the Vulnerable Software and Affected Versions Citrix Linux Virtual Delivery Agent versions prior to 1.4.0 Description The issue allows local users to gain root privileges via unspecified vectors. Recommendations For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the...

Generate Security Keys warning on Storefront management console

Question:Is the warning to generate new security keys related to the Server certificate used for storefront base URL? Answer: No, this warning is not related to the server certificate used for storefront base URL. This indicates that the Self-Signed certificates generated by storefront are expire...

Boozt.com - We deliver fashion - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Boozt.com - We deliver fashion published at the 'play' market has multiple vulnerabilities...