mdfa (>=0.9.0 <=0.9.1), meadow (>=1.0.1 <=1.0.16) +2 more potentially affected by CVE-2016-2537 via is-my-json-valid (>=1.4.2 <=2.12.3)

is-my-json-valid NPM version =1.4.2, =0.9.0, =1.0.1, =1.3.0, =2.3.2 - tartare-logs =0.5.0 Source cves: CVE-2016-2537 Source advisory: OSV:GHSA-F522-FFG8-J8R6...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...

Troubleshooting NetScaler and NetScaler Gateway License Issues

Find the resolution based on the exact error message in the /var/log/license.log file. An Invalid Entry in /nsconfig/hosts An Invalid Entry in /nsconfig/rc.conf An Invalid Date in the System An Expired License A Corrupted License File An Invalid Entry in /nsconfig/hosts Error 1:33:22 lmgrd Unknow...

Unable to enroll any device when using Certificate based authentication

Enrollments are failing for all platforms. During the enrollment process,the server logs are showing a failure to sign the CSR, followed by a wipe triggered on the device: 2017-09-10T10:11:12.45+0100 | 32A9CFAD5515A088 | ERROR | http-nio-10443-exec-3 | com.sparus.nps.ios.agent.V10AgentHandler |...

ansible: jenkins_plugin module exposes passwords in remote host logs

A flaw was found in the way Ansible passed certain parameters to the jenkinsplugin module. A remote attacker could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in th...

FBI Asks Businesses to Share Details About DDoS Attacks

The FBI has made an appeal to organizations victimized by DDoS attacks to share details and characteristics of those incidents, echoing a similar plea made last year in the throes of a relentless wave of ransomware attacks. The bureau said victims should contact local field offices regardless of...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

OSXAuditor - Free Mac OS X Computer Forensics Tool

OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and deprecated system a...

PureVPN Aided FBI to Track CyberStalker by Providing His Logs

By Waqas On Friday a New Town, Massachusetts based man called Ryan This is a post from HackRead.com Read the original post: PureVPN Aided FBI to Track CyberStalker by Providing His Logs...

FBI Arrests A Cyberstalker After Shady "No-Logs" VPN Provider Shared User Logs

FBI recently arrested a psycho cyber stalker with the help of a popular VPN service and this case apparently exposed the company's lies about the "no logs" policy. Taking down cyber stalkers and criminals is definitely a good thing, and the FBI has truly done a great job, but the VPN company whos...

[SECURITY] [DSA 3993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3993-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 06, 2017 https://www.debian.org/security/faq -...

Some WEMs Agent are failing to check in with WEM Broker

Many WEM Agents do not check in with the WEM Broker Server and they are missing from the Agent List inside of the WEM Administration Console. For example, this screenshot shows only 4 Agents checking in but dozens more WEM Agents are configured and should be present in this list: The Debug logs o...

MAM Enrollment failing with Error Message"Request Failed"

You will see the following error messages in the Secure Hub Logs: 2016-09-06T22:55:17.691+0400INFO 4called for store with error Error Domain=com.citrix.Receiver.AuthManager Code=6 "CAMAuthManErrorCodeOutOfLicences" UserInfo=com.citrix.Receiver.AuthManager.DiagnosticDescription=The gateway is out ...

How to enable/collect logs on WEM Agent machine

Type of logs available: There are a number of logs that can be collected from the WEM Agent to help with troubleshooting/diagnosing an issue Note:Please make sure to revert all changes after completing log collection. For logging information related to WEM Brokers, see CTX228742 1. WEM Agent...

HTTP Client in JIRA does not accept RFC6265 compliant date format in "Expires" cookie header

When using AWS Application Load Balancer, the following WARN log messages are shown in the logs, as JIRA does not understand the "Expires" header used for sticky sessions. code:java 2017-09-27 01:44:47,292 HealthCheck:thread-7 WARN o.a.h.client.protocol.ResponseProcessCookies Invalid cookie heade...

ThunderShell - PowerShell based RAT

ThunderShell is a Powershell based RAT that rely on HTTP request to communicate. All the network traffic is encrypted using a second layer of RC4 to avoid SSL interception and defeat network hooks. Dependencies apt install redis-server apt install python-redis Logs Every errors, http requests and...

WEM admin console fails to connect with error: Error while connecting to the specified Infrastructure Server

The WEM Administration Console errors out while connecting to the broker with a generic error: "Error while connecting to the specified Infrastructure Server". Looking into the the WEM admin console debug logs %userprofile%\Citrix WEM Console Trace.Log the following error is reported: Exception -...

CVE-2017-7550

A flaw was found in the way Ansible passed certain parameters to the jenkinsplugin module. A remote attacker could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in th...