CVE-2017-2675

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

Launches Hosts in AWS

This module will attempt to launch an AWS instances hosts in EC2. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/aws/client' class MetasploitModule "Launches Hosts in AWS", 'Description'...

Session launches in HTML5 instead of native Workspace app/Citrix Receiver

When a user attempts to launch a session from the StoreFront website, the session would be launched automatically via Workspace app for HTML5 instead of native Workspace app...

Application launch results in White screen Through NetScaler Gateway using Windows Receiver 8.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Receiving the ICA File and Clicking on Application Results in White Screen...

Unable to Launch Applications on StoreFront Through Thin Clients

When the user clicks on the application icon on StoreFront to launch it, nothing happens and the application fails to launch...

Pivotal GemFire for PCF Unauthorized Access Vulnerability

GemFire for PCF is a distributed management platform designed by Pivotal for many different data management situations, but is particularly useful for high-volume, latency-sensitive, mission-critical transactional systems. An unauthorized access vulnerability exists in Pivotal GemFire for PCF. An...

CVE-2015-7494

A vulnerability has been identified in IBM Cloud Orchestrator services/action/launch API. An authenticated domain admin user might modify cross domain resources via a /services/action/launch API call, provided it would have been possible for the domain admin user to gain access to a resource...

IBM InfoSphere DataStage Information Disclosure Vulnerability

IBM InfoSphere DataStage is a set of IBM's ETL Extract, Transform, and Load tools to provide data integration solutions in a graphical interface, and is part of the IBM suite of information platform solutions and IBM InfoSphere. An information disclosure vulnerability exists in IBM InfoSphere...

Published app does not launch when SSO is used. Desktops launch fine.

Using Receiver and Receiver for web, published app wont launch but a published desktop works fine. If user is local admin - it works If signing in with username/password on Receiver or Receiver for web - it works. Event generated on vda host: "non-brokered ica connection request denied because th...

Application Launch Fails Intermittently With Event ID 7

User launches published desktop via Storefront and can see the DesktopViewer. Desktop Viewer closes after a few seconds and logs the following error in the EventLog: Event ID: 1050 Citrix Desktop service connection validation failed on domain "for user" for reason "Deny" followed by Event ID7: "I...

Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file

Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...

Multiple Unify Product Information Disclosure Vulnerabilities

Unify is a leading communications software and services company in China. OpenScape and HiPath are the unify suite of solutions for enterprise unified communications. An information disclosure vulnerability exists in multiple Unify products, which can be exploited by attackers to obtain sensitive...

FAS Authentication fails with an error "The username or password is incorrect"

When we try launching application or desktop with FAS configured in the StoreFront, we get an error "The username or password is incorrect"...

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

Cross site scripting

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

CVE-2016-7883

Adobe Experience Manager 6.2 is affected by a cross-site scripting vulnerability in the “Create Launch” wizard caused by an input validation issue. The vulnerability involves the Launch wizard input processing and can enable XSS. Connected sources do not provide exploitation details or explicit r...

In ie8 using ROP and Heap Spray using the bounce of the shell-vulnerability warning-the black bar safety net

This exploit program is for the Windows 7 platform on the IE8 browser. The focus of our attention is one that uses the Java network launch Protocol JNLP the plug-in, this plug-in there is overflow vulnerability. In order to achieve the use, I will use the Heaplib to construct a ROP chain in order...

The Connection to "App/Desktop Name" Failed With Status (There is no Citrix XenApp Server Configured on the Specified Address)

Users receive this error when trying to launch externally: "The connection to "App/Desktop Name" failed with status There is no Citrix XenApp server configured on the specified address.."...

When Launching an Application Internally via Netscaler User Receives Error: "Cannot Connect To The Citrix XenApp Server. There Is No Citrix XenApp Server Configured On The Specified Address"

With a NetScaler Gateway and StoreFront setup, while launching application users get following or similar errors: "Unable to launch your application. Contact your help desk with the following information. Cannot connect to the Citrix XenApp server. There is no Citrix XenApp server configured on t...