22 matches found
CVE-2026-45108
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to before 3.1.5 and 2.3.11, Himmelblau contained an authentication bypass vulnerability in the Device Authorization Grant DAG flow that allowed a user within the same Entra ID domain to obtain a local Unix...
EUVD-2005-4678
Malware in sbrugna...
How to configure multiple domains SSO with Imprivata on NetScaler Gateway
Enable Single-Sign-On into Storefront from NetScaler Gateway with Imprivata RADIUS authentication for more than one Active Directory domain...
The SNI Feature of NetScaler Appliance
This article contains information about Server Name Identification SNI feature of the NetScaler appliance. Background The SNI feature is included starting with the NetScaler software release 9.2. Note : The SNI feature is not supported on the back end connections. For information on how to...
Drupal voor Gemeenten - Moderately critical - Access Bypass - SA-CONTRIB-2019-031
The DvG distrubition contains the feature module dvgdomains to support multiple domains. When the dvgdomains feature module is enabled, anonymous users are able to access some administration pages and change the settings exposed on those pages. This issue can be mitigated by disabling the...
PVS Console | Fails to load farm\site\server details with error 'Server communication timeout'
The PVS Console throws following error while expanding farm\site\server details: 'Server communication timeout' MMC Console timeouts may also be seen. Now consider a Large AD Environment, where there are multiple Domains and the PVS Administrator User account used to access the PVS Console is par...
PVS7.15 - PVS configuration wizard "hangs" when configuring new farm
The PVS configuration wizard "hangs" when configuring new farm. This happens in case you have multiple domains...
Inflection: Host Header Injection or cache poisoning in multiple domains
Researcher submitted a report related to host header injection, which is currently considered out of scope for our program, so we closed the report. Researcher requested public disclosure...
How to configure ADFS Claim Rules and StoreFront with Multiple Domains
How to configure ADFS Claim Rules and StoreFront with multiple domains?...
How to Configure Multiple Domains for Citrix Endpoint Management
The primary intent of this article is to provide steps on how to add additional domains in the Citrix Endpoint Management using Citrix Cloud Connector. This article is created assuming the first domain is already added to Citrix Endpoint Management...
Troubleshooting Checklist: Cannot enroll and authenticate a device using Secure Hub
If a device cannot enroll and authenticate using Secure Hub, ask the following questions: Is the user synced to XenMobile? Are there multiple domains managed? For details on multi-domain configuration in MAM+MDM mode, see this Citrix blog post. Is the Global Catalog port managed? From which domai...
How to Authenticate Multiple Domains using NetScaler with ICA Proxy and Single Sign-on
...
Xen libxl toolstack library denial of service vulnerability
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. The Xen ibxl toolstack library fails to properly release the file mappings made for the kernel and initial virtual disks when managing multiple domains in the same process, allowi...
CVE-2015-8341
The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service memory and disk consumption by starting domains...
CVE-2015-8341
The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service memory and disk consumption by starting domains...
53KF一处通用注入通杀旗下大部分域名
简要描述: RT 详细说明: 案例如下: http://www3.53kf.com/zdydbgg2.php?styleid=103458019&companyid=62748324&dbggtype=2 http://www22.53kf.com/zdydbgg2.php?styleid=103766842&companyid=70818335&dbggtype=2 http://www17.53kf.com/zdydbgg2.php?styleid=106052692&companyid=72028138&dbggtype=2...
shopex绕过补丁本地包含漏洞#4
简要描述: 360提交的漏洞,官方修复不严谨 详细说明: http://bbs.webscan.360.cn/forum.php?mod=viewthread&tid=8613&extra=page%3D1 修复前: 修复后(\core\api\shopapi.php): if isset$REQUEST'appname' $appName = pregreplace'/^a-z0-1/i', '', $REQUEST'appname'; elseif strpos$apiAct, ':' 0 // request plugin api list$appName, $apiAct =...
CVE-2006-0299
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin...
CVE-2006-0421
By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not...
[SA18581] BEA WebLogic Server/Express Multiple Domains Administrator Access
TITLE: BEA WebLogic Server/Express Multiple Domains Administrator Access SECUNIA ADVISORY ID: SA18581 VERIFY ADVISORY: http://secunia.com/advisories/18581/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BEA WebLogic Server 6.x http://secunia.com/product/753/ BEA...