165 matches found
BrainDamage - A fully featured backdoor that uses Telegram as a C&C server
A python based backdoor which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul [email protected] -- Github: https://github.com/mehulj94 -- Twitter: https://twitter.com/wayfarermj -- For windows only | | | | | | | | | / / | | | | | '/ / |...
LocalTapiola: show control page if you insert ' at http://viestinta.lahitapiola.fi/
Issue The reporter found that one error page that could be triggered had an outer "frame" that contained some administrative menus and a logoff-button. The menus were visible but as the user was not logged on, had no real functionality enabled. The logoff-button was mereley misinforming. Fix The...
Storefront Logoff Error "If any apps are still running, please exit them manually"
When logging off from the Storefront portal a logoff error message is presented: Logoff Error If any apps are still running, please exit them manually...
How to configure a session disconnect timer in XenApp 7.x
To set up a time limit so that any session in a Disconnected state is logged off after a predetermined amount of time...
Java Properties not Saved to the User Profile
Under certain circumstances Java properties might not save to the User Store on Logoff...
Profiles Are Not Written Back to User Store on Logoff
Under certain circumstances User Profiles are not written back to the UPM User Store during log off...
CVE-2016-6025
The Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL...
CVE-2016-6025
The Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL...
Default configuration
The Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL...
CVE-2016-6025
CVE-2016-6025 affects IBM Sterling Secure Proxy (SSP) Configuration Manager. The issue occurs in SSP versions 3.4.2 before iFix 8 and 3.4.3 before iFix 1, where a post-logoff session-reuse attack via a modified URL could allow remote attackers to obtain access. The vulnerability is tied to the Co...
CVE-2016-6025
The Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL...
Citrix Receiver Kiosk mode
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. StoreFront 3.6 Question: Often the customers who are in hospital environment have the question that ...
Unable to Delete NTUSER.DAT* Files When a User Logs off
Occasionally, when Delete Locally Cached Profiles on logoff policy is enabled on Windows 10 Redstone, or on Windows Server 2016, NTUSER.DAT files cannot be deleted when a user logs off...
Active Directory Federation Services information disclosure
Invalid session logoff...
CVE-2015-1638
Microsoft Active Directory Federation Services AD FS 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosur...
CVE-2015-1638
Microsoft Active Directory Federation Services AD FS 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosur...
KLA10557 Security bypass vulnerability in Active Directory
Improper logoff handling was found in Microsoft Active Directory. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via workstation manipulations. Original advisories MS15-040 CVE-2015-1638 Related products...
CVE-2014-6331
Microsoft Active Directory Federation Services AD FS 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka "Active...
IBM WebSphere DataPower XC10 Administrative Access及Web Logoff漏洞
CVECAN ID: CVE-2013-5428,CVE-2013-5446 XC10设备是WebSphere DataPower硬件平台和IBM分布式缓存技术的结合。 IBM WebSphere DataPower XC10 2.5、2.1存在安全漏洞，可使未经身份验证的攻击者访问某些管理员操作，造成拒绝服务；并且在处理Web注销时也存在错误。 0 IBM WebSphere DataPower XC10 2.5 IBM WebSphere DataPower XC10 2.1 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...