insidegrahamautogroup.com Cross Site Scripting vulnerability OBB-3615293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lazarus Group's infrastructure reuse leads to discovery of new malware

In the Lazarus Groups latest campaign, which we detailed in a recent blog, the North Korean state-sponsored actor is exploiting CVE-2022-47966, a ManageEngine ServiceDesk vulnerability to deploy multiple threats. In addition to their "QuiteRAT" malware, which we covered in the blog, we also...

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

Cisco Talos discovered the North Korean state-sponsored actor Lazarus Group targeting internet backbone infrastructure and healthcare entities in Europe and the United States. This is the third documented campaign attributed to this actor in less than a year, with the actor reusing the same...

altissimagroup.com Cross Site Scripting vulnerability OBB-3614483

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

“The Access Policy has externally been modified and cannot be changed by Studio” warning message

After setting access policy rule, “Access Policy” option in “Edit Delivery Group” dialog cannot display. ------------------------ Add-PSSnapin -Name Citrix. Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPFilterEnabled $True Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPs xxx.xxx.xxx.xxx...

Session Prelaunch Is Not Working

Prelaunch is enabled on the delivery group. Users are authorized for Prelaunch is not working...

MGASA-2023-0245 Updated docker-containerd packages fix security vulnerability

Memory leak. CVE-2022-23471 Denial of service with maliciously crafted image with a large file CVE-2023-25153 Security bypass due to improper supplementary group handling. CVE-2023-25173...

Cloud Virtual Apps and Desktop - All the users are seeing 2 VDI

Seeing two Desktop VDI icons in Citrix Store instead of one when user is only assigned to one Delivery Group...

StoreFront Propagate Changes not working

Running Propagation results in MMC returning "Snap-in Unavailable: This snap-in performed a non-valid operation and has been unloaded ... Exception Message: Object reference not set to an instance of an object" In event viewer, Citrix Delivery Services Admin records "Error in retrieving...

August 22, 2023—KB5029332 (OS Build 22000.2360) Preview

None None...

August 22, 2023—KB5029331 (OS Build 19045.3393) Preview

None None...

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

ticket.akb48-group.com Cross Site Scripting vulnerability OBB-3599190

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

CVE-2023-39106

CVE-2023-39106 concerns the Nacos Spring Project (v1.1.1 and earlier). The issue arises in the SnakeYamls Constructor(), used to parse YAML files, allowing a remote attacker to execute arbitrary code. The vulnerability is described consistently across multiple sources in the provided documents (N...

How to configure WEM load balance

This article guides you through the deployment of a Workspace Environment Management WEM server group containing two or more infrastructure servers in all active load balanced configurations. The article provides details of how to configure a Citrix ADC appliance to load balance incoming requests...

Add Machine fails with "Currently there are no machines available in a compatible machine catalog"

VDAs from the newly created Machine catalog cannot be added to an existing Delivery group. The error message is: "Currently there are no machines available in a compatible machine catalog."...

Delivery Group Power management turns off a few VDAs

Few VDAs are powered off during the off-peak hours Requirement is to keep all the machines to be powered On all the time but reboot the machines after a user logs off...

New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools

Microsoft on Thursday disclosed that it found a new version of the BlackCat ransomware aka ALPHV and Noberus that embeds tools like Impacket and RemCom to facilitate lateral movement and remote code execution. "The Impacket tool has credential dumping and remote service execution modules that cou...