How To Change The Default Password of nsroot User of a NetScaler SD-WAN WANOP Edition Appliance

The objective of this article is to provide the correct procedure to change the default password of nsroot user of a NetScaler SD-WAN WANOP Edition Appliance. SVM and XS instance can be accessed via CLI and customers can potentially change the password via the CLI. In this case the SVM password c...

Easy Solar Photovoltaic Design - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Easy Solar Photovoltaic Design published at the 'play' market has multiple vulnerabilities...

AlfaStrakhovanie Mobile - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application AlfaStrakhovanie Mobile published at the 'play' market has multiple vulnerabilities...

DreamTV - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DreamTV published at the 'play' market has multiple vulnerabilities...

CVE-2017-14602 - Authentication Bypass Vulnerability in the Management Interface of Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition Appliances

Description of Problem A vulnerability has been identified in the management interface of the Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition appliances. This vulnerability, if exploited, could allow an attacker with access to the management interface of the...

Best Practices for Deployment of CITRIX SD-WAN

To configure the management access of SDWAN in a secure manner. https://docs.netscaler.com/en-us/citrix-sd-wan Citrix SD-WAN editions are typically deployed in an enterprise private network. We recommend that you deploy the Citrix SD-WAN solution wherein the management IPs are accessible only fro...

The vulnerability of the delivery interface component in NetScaler SD-WAN applications allows a attacker to execute arbitrary shell commands.

The vulnerability of the control interface component for NetScaler SD-WAN applications exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands with root privileges, using the CGISESSID cookie file...

CVE-2017-14610

bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root scrip...

Facebook WhatsApp Messenger for Android Vulnerability Local Message Disclosure Vulnerability

Facebook WhatsApp Messenger for Android is a suite of mobile applications from Facebook, Inc. in the United States based on the Android platform that utilize the web to send text messages. The application uses the contact information in the smartphone to find contacts using the program to send...

Foscam C1 Webcam FTP Hard Coded Password Vulnerability(CVE-2016-8731)

Summary Hard-coded FTP credentials r:r are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device. Tested Versions Foscam C1 Firmware Version...

How To Add Additional Storage to an Existing SD-WAN Center VM

The objective of this article is to provide assistance on how to add some additional storage from what was initially configured during the initial import of a NetScaler SD-WAN Center VM...

FAQ: NetScaler SD-WAN Center and Hardware Requirements

Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...

IPS as a Service Blocks WannaCry Spread Across the WAN

One of the most devastating aspects of the recent WannaCry ransomware attack was its self-propagating capability exploiting a vulnerability in the file access protocol, SMB v1. Most enterprises defences are externally-facing, focused on stopping incoming email and web attacks. But, once attackers...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

NetScaler SD-WAN QOS and Application Rules

Citrix SD-WAN, formerly NetScaler SD-WAN Table of Contents Introduction QOS Components Transmit Modes Queue Depth IP Rules Application QOS rules with release 9.3 Basic Rules Basic guidance on Rules. Other Settings that affect Applications. Appendix A: Default Rules Breakdown Introduction The...

GPS Logger - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application GPS Logger published at the 'play' market has multiple vulnerabilities...

Citrix NetScaler SD-WAN RCE

Remote command execution vulnerability in Citrix NetScaler SD-WAN Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Citrix NetScaler SD-WAN Appliance Remote Code Execution Vulnerability

Citrix NetScaler SD-WAN devices are a central controller appliance with network visibility from Citrix Systems, Inc. A security vulnerability exists in Citrix NetScaler SD-WAN devices version 9.1.2.26.561201 and earlier. A remote attacker can exploit the vulnerability to execute arbitrary shell...

Design/Logic Flaw

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge the former name of NetScaler SD-WAN devices, the cookie name was CAKEPHP rather than CGISESSID...

CVE-2017-6316

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge the former name of NetScaler SD-WAN devices, the cookie name was CAKEPHP rather than CGISESSID...