nlquery.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-527304 Description| Value ---|--- Affected Website:| nlquery.epa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yosemite.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-489597 Description| Value ---|--- Affected Website:| yosemite.epa.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

EPA for device certificate check fails on NetScaler

Users get the error "access denied" after EPA scan even with valid certificates available in the store...

search.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-407788 Description| Value ---|--- Affected Website:| search.epa.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans

This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...

Limitations of NetScaler Gateway OPSWAT EPA Scan

NetScaler Gateway as such does not have a whitelist or blacklist of products and relies on the OPSWAT for this. If a particular product is not present in the NetScaler predefined expressions then this product is not supported for EPA scans. When using a generic scan OPSWAT scans all the supported...

How to Implement NetScaler Gateway EPA Only for Windows Clients

This article provides provides information on how to implement NetScaler Gateway EPA only for Windows clients not mobile devices connecting from the Internet. Mobile devices cannot run the EPA scan. So, they need to bypass it using either a policy or a different virtual server...

yosemite.epa.gov XSS vulnerability

Vulnerable URL: https://yosemite.epa.gov/oarm/igmsegf.nsf/allgrantsnarrow?SearchView= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

Suing to See the Feds’ Encrypted Messages? Good Luck

Conservative watchdog Judicial Watch is suing the EPA for staffers' Signal messages. It may hit the encrypted limits of federal transparency. The post Suing to See the Feds' Encrypted Messages? Good Luck appeared first on WIRED...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Domain Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for domain check...

How to Configure NetScaler Gateway EPA Scans to Detect Receiver on Clients

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway EPA scans to detect clients without Receiv...

Error: "The Gateway has EPA enabled, which is not supported on iOS devices" on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when logging on to iOS Receiver: The Gateway has EPA enabled, which...

NetScaler Gateway EPA Scan Fails When Checking for "Windows Update" on Client Machine

When NetScaler Gateway EPA scan is configured to validate if the Windows update on client machine has been performed within X days, the scan fails on client machine...

edg.epa.gov XSS vulnerability

Vulnerable URL: https://edg.epa.gov/metadata/catalog/search/resource/review.page?uuid=%22-alert/OPENBUGBOUNTY/-%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Antivirus and Firewall Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for antivirus and firewall check...

blog.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-154089 Description| Value ---|--- Affected Website:| blog.epa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.epa.gov XSS vulnerability

Vulnerable URL: http://blog.epa.gov/trireportingtribalconsult/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Understanding and Configuring EPA Verbose Logging on Citrix Gateway

CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...

cfpub.epa.gov XSS vulnerability

Vulnerable URL: http://cfpub.epa.gov/ncerabstracts/index.cfm/fuseaction/searchControlled.main?RequestTimeout=180 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

cfpub.epa.gov XSS vulnerability

Vulnerable URL: http://cfpub.epa.gov/roe/search.cfm Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website...