Cross-Site Scripting Vulnerability in Multiple F5 Products

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A cross-site scripting vulnerability exists in several F5 products, which can be exploited by remote attacker...

Threat Outbreak Alert RuleID25383: Email Messages Distributing Malicious Software on September 30, 2016

Medium Alert ID: 49160 First Published: 2016 October 3 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25383 may contain the following files: Name |...

foodora - Finest Food Delivery - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application foodora - Finest Food Delivery published at the 'play' market has multiple vulnerabilities...

How to Disable Power Management

To disable power management for a Delivery Group...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...

Hancitor Downloader Abusing APIs, PowerShell Commands

Developers behind the malicious downloader Hancitor have bolstered the malware again, this time with new delivery approaches that make it more difficult to detect. The downloader is still spread through malicious attachments, and distributing malware designed to steal data, such as Pony and...

CVE-2016-6276

CVE-2016-6276 affects Citrix Linux VDA (formerly Linux Virtual Desktop) prior to 1.4.0. A local attacker can escalate privileges to root via unspecified vectors. The vulnerability is addressed in version 1.4.0 and later; affected customers should upgrade to 1.4.0+ to mitigate. If exploiting detai...

Generate Security Keys warning on Storefront management console

Question:Is the warning to generate new security keys related to the Server certificate used for storefront base URL? Answer: No, this warning is not related to the server certificate used for storefront base URL. This indicates that the Self-Signed certificates generated by storefront are expire...

Boozt.com - We deliver fashion - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Boozt.com - We deliver fashion published at the 'play' market has multiple vulnerabilities...

Hancitor (AKA Chanitor) observed using multiple attack approaches

Many threat actors use multiple attack vectors to ensure success. The individuals using Hancitor malware also known by the name Chanitor are no exception and have taken three approaches to deliver the malware in order to ultimately steal data from their victims. These techniques include uncommon...

Hancitor (AKA Chanitor) observed using multiple attack approaches

Many threat actors use multiple attack vectors to ensure success. The individuals using Hancitor malware also known by the name Chanitor are no exception and have taken three approaches to deliver the malware in order to ultimately steal data from their victims. These techniques include uncommon...

Prompt to "Upgrade Remaining Delivery Controllers" after XenDesktop/XenApp upgrade

After upgrading site to 7.6, the controller still says the upgrade is not complete. There is only one controller and it has been upgraded but it references another server License Server as needing to be upgraded...

Citrix Linux Virtual Delivery Agent Local Privilege Vulnerability

Citrix Linux Virtual Delivery Agent formerly known as Linux Virtual Desktop is a suite of virtual desktop software from Citrix Systems. A local elevation of privilege vulnerability exists in Citrix Linux Virtual Delivery Agent versions prior to 1.4.0. A local attacker could exploit this...

September 20, 2016 — KB3193494 (OS Builds 14393.187 and 14393.189)

None None...

September 20, 2016 — KB3193821 (OS Build 10240.17113)

None None...

Threat Outbreak Alert RuleID24489: Email Messages Distributing Malicious Software on September 26, 2016

Medium Alert ID: 48861 First Published: 2016 September 12 19:18 GMT Last Updated: 2016 September 27 13:47 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

How to Change Desktop Icon for All Delivery Groups

This document outlines how to change Desktop Icon for All Delivery Groups in XD 7.X using storefront 2.X or 3.X. Changes If you are publishing both XenApp desktops and XenDesktop desktops you may want to change the default Xendesktop Icon to Custom Icon. XenDesktop desktop has the default icon as...

Changing delivery group icons with storefront 3.0 or above in the environment.

...

HackerOne: Lack of length validation on user address attribute

Hi The input fields for adding mailing address for swag delivery in https://hackerone.com/settings/swags are not restricted in input lengths. I was able to add and read the contents via my own address page and the team pagewho awards the swag over 585728 characters in each of the input fields Nam...

Threat Outbreak Alert RuleID24353: Email Messages Distributing Malicious Software on August 18, 2016

Medium Alert ID: 48517 First Published: 2016 August 18 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24353 may contain the following files: Name |...