Machine is vulnerable to attacks after CPUSE clean install and before completing the First Time Wizard

...

RADIUS/TACACS+ users fail to change the default admin password when running the First Time Wizard

...

How to properly bind WEM agent machines with WEM broker server on a first time setup

This article explains how to properly bind the WEM agent machines to the WEM broker server on a first time setup of the Citrix Workspace Environment Management product...

go.firsttimebuyerwebinar.com XSS vulnerability

Open Bug Bounty ID: OBB-585514 Description| Value ---|--- Affected Website:| go.firsttimebuyerwebinar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

What is the Default Password for App Layering?

Question: What is the default root password for the Citrix Enterprise Layer Manager ELM via console for App Layering Unidesk? Answer: The default username and password sets for App Layering Unidesk are as follows: rootvia the ELM virtual appliance console - two possible defaults: v9Yx6uj OR...

Installer of Setup file of advance preparation for e-Tax software (WEB version) may insecurely load Dynamic Link Libraries

Overview Installer of Setup file of advance preparation for e-Tax software WEB version provided by National Tax Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. BlackWingCat of Pink Flying Whale reported this vulnerability to IPA...

How Do I Deploy Self-Service Password Reset For the First Time

The primary intent of this article is to provide steps to how to deploy Self-Service Password Reset SSPR environment for the first time...

members.firsttimeauditions.com XSS vulnerability

Vulnerable URL: http://members.firsttimeauditions.com/?a=user.login Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pageran...

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

Dradis v2.6 - Tool for sharing information during security testing !

"Dradis is a tool for sharing information during security testing. While plenty of tools exist to help in the different stages of the test, not so many exist to share interesting information captured. When a team of testers is working on the same set of targets, having a common repository of...