2110 matches found
Linux Kernel ksmbd ACL Inheritance Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication may or may not be required to exploit this vulnerability, depending upon configuration. Furthermore, only systems with ksmbd enabled are vulnerable. The specific flaw...
GHSA-7G94-HFQC-Q993 Apache StreamPark: Unchecked maven build params could trigger remote command execution
In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...
Error: "Cannot connect to server. Try again in a few minutes" on StoreFront
End-user is unable to add Store into Receiver, unless the full Store path is appended. Example https://SF-FQDN/Citrix/; - Add Store is successful https://SF-FQDN - Add Store fails: After user gets prompted for credentials, an error message appears: "Cannot connect to server. Try again in a few...
Memory Dump File Not Being Generated on Provisioned Target
While attempting to configure a Windows 2008 target server created by Citrix Provisioning Services to generate a complete memory dump, it was observed that the memory dump file was not being created properly. Following CTX123642 – How to Recover Windows Kernel Level Dump Files from Provisioned...
Error: "HVM is Required for this Operation" when Trying to Start the VM in XenServer
Example 1 When trying to start the virtual machine VMthe following error is returned: “ There were no servers available to start VM ” The reason is displayed as “ HVM Hardware Virtual Machine is required for this operation ” Example 2 When trying to migrate a Windows VM from one host to another...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 8
Package name: xms10.15.0.10808.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: July 2024 Languages...
kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol number in custom expectations The Linux kernel CVE team has assigned CVE-2024-26673 to this issue. Upstream advisory:...
.NET 8.0 Update - July 9, 2024 (KB5041081)
None None...
July 9, 2024-KB5039892 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2
None None...
Installing Teams 2.x in an App Layering
Teams will not work properly in an image if it was installed in an App Layer using any version for App Layering prior to 2403.2...
PT-2024-28337 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions =12.9 Description: An issue in SeaCMS allows remote attackers to execute arbitrary code via the "admin ping.php" endpoint. This enables attackers to run malicious code on the affected system. Recommendations: For SeaCMS versio...
PT-2024-18814
Name of the Vulnerable Software and Affected Versions MTP application versions prior to SMR Jul-2024 Release 1 Description The issue concerns improper authentication in the MTP application, allowing local attackers to enter MTP mode without proper authentication. Recommendations For versions prio...
MAL-2024-5917 Malicious code in requierement (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in requierement (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5860 Malicious code in req6 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
PCI DSS 4.0.1: New Clarifications on Client-Side Security – What You Need to Know
As a leading provider of web application and API security solutions, Imperva is committed to helping merchants, payment processors, and anyone seeking to comply with the latest PCI DSS requirements. We previously discussed the changes introduced in PCI DSS 4.0. This blog will cover the...
CLSA-2024-1718903513 cups: Fix of 2 CVEs
CVE-2023-32360: require authentication for CUPS-Get-Document. - CVE-2023-32324: fix cupsstrlcpy to exit immediately if a length of the source string is zero...
PT-2024-26635 · Unknown · Link Library
Name of the Vulnerable Software and Affected Versions: Link Library versions n/a through 7.6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions n/a...
