Threat Prevention & Detection in SaaS Environments - 101

Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and respond to them. According to the US Cybersecurity and Infrastructure Security Agency CISA, 90% of all cyberattacks begin with phishing, an identity-bas...

SUSE CVE-2024-40927

In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, multiple TDs might be in flight when an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for each, to ensure everything is reset...

Citrix Virtual Apps and Desktop - Graphics, HDX Optimization and Audio

Introduction This article is a summary of the support articles and documentation related to Graphics and Display issues, HDX Optimization Teams and Browser Content Redirection and Audio. Overview of the Issue HDX is a set of remoting technologies providing the user with the best possible virtual...

Citrix Daas - Authentication

Introduction This article is a summary of the top support articles and Product Documents related to Citrix DaaS Authentication Methods. The most commonly used support articles and guides are below. It is recommended that all customers refer to the product documentation for configuration related...

Error: "An error occurred during synchronization" in StoreFront

When trying to synchronize changes on a StoreFront multi-server environment, the following errors are displayed: Error: “An error occurred during synchronization” You might also view errors in the StoreFront Server Console Server Group. Error: “Cannot get valid synchronization state information...

How to Configure XenServer 6.x Multi-GPU Passthrough for XenDesktop HDX 3D Pro Graphics

This article describes how to configure XenServer 6.0 with XenDesktop for HDX 3D Pro Graphics so that a host workstation with multiple graphics cards can be shared by an equal number of concurrent high-end professional graphics users one user per GPU, thereby reducing the cost per user. Hardware...

CVE-2024-40999 net: ena: Add validation for completion descriptors consistency

In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that first flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for R...

Ever Wonder How Hackers Really Steal Passwords? Discover Their Tactics in This Webinar

In today's digital age, passwords serve as the keys to our most sensitive information, from social media accounts to banking and business systems. This immense power brings with it significant responsibility—and vulnerability. Most people don't realize their credentials have been compromised unti...

iPhone users in 98 countries warned about spyware by Apple

In April 2024, we reported how Apple was warning people of mercenary attacks via its threat notification system. At the time it warned users in 92 countries. In a new round, Apple is now warning users in 98 countries of potential mercenary spyware attacks. The message sent to the affected users...

CVE-2024-6625

The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-6625

CVE-2024-6625 concerns the WP Total Branding – Complete branding solution for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in admin settings present in all versions up to 1.2, caused by insufficient input sanitization and output escaping. Attack requires authent...

CVE-2024-6625: Improper Neutralization of Input During Web Page Generation

The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2024-32737

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the drm/amd/display component. This occurs when there is an attempt to recompute DSC parameters without a...

Exploit for SQL Injection in Valvepress Automatic

Wordpress SQLI-2-RCE Exploit - This Python script exploits CVE...

ViperSoftX Malware Disguises as eBooks on Torrents to Spread Stealthy Attacks

The sophisticated malware known as ViperSoftX has been observed being distributed as eBooks over torrents. "A notable aspect of the current variant of ViperSoftX is that it uses the Common Language Runtime CLR to dynamically load and run PowerShell commands, thereby creating a PowerShell...

openSUSE Security Advisory (SUSE-SU-2024:2260-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PingOne MFA Integration Kit Security Vulnerability

The PingOne MFA Integration Kit is an integration kit from Ping Identity designed to help developers integrate Multi-Factor Authentication MFA functionality into their applications or services. A security vulnerability exists in PingOne MFA Integration Kit versions prior to 2.3.1, which stems fro...

‘RockYou2024’: Nearly 10 billion passwords leaked online

On a popular hacking form, a user has leaked a file that contains 9,948,575,739 unique plaintext passwords. The list appears to be a compilation of passwords that were obtained during several old and more recent data breaches. The list is referred to as RockYou2024 because of its filename,...

multi-pay.hu Cross Site Scripting vulnerability OBB-3941418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Atril Program Restricted Access Bypass

The vulnerability of the Atril application for viewing multi-page documents relates to the possibility of bypassing a restricted-access catalog. Exploiting this vulnerability could allow an intruder to write arbitrary files...