400 matches found
While using FAS application launch fails with error "Cannot start app <Application Name>"
Application launch fails with error "Cannot start app ", Event ID 1 and 28 are logged on Storefront servers. Event ID: 1 Description: The Federated Authentication Server at: returned a server error: 1 for method AssertIdentity...
PVS : Failed to connect to the PVS API, error : Unable to connect to the remote server
PVS : Unable to connect to the PVS API, error - Unable to connect to the remote server...
Zulip logic error vulnerability
Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations. A logic error vulnerability exists in Zulip versions 2.1.0 through 5.2, which originates when the server incorrectl...
Protect
A server-generated error message containing sensitive information vulnerability CWE-550 in FortiOS and FortiProxy web proxy may allow a malicious webserver to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...
March 22, 2022—KB5011551 (OS Build 17763.2746) Preview
None None...
Active Sync Gateway Connector isn't working with new devices since Update to 10.14 RP4
After upgrading from 10.14 RP3 - 10.14 RP4 any new enrolled device can't access to our Exchange Server via Active Sync Connector. After rebooting XenMobile server during the update process, we observe errors in the RemoteConfigService.log file as follows: Error |...
PVS - 1912 - Unable to boot TD. Error "Server [IP Address]:6930: vDisk file access permission denied."
Unable to boot Target Device. Error "Server IP Address:6930: vDisk file access permission denied."...
Cross-Site Request Forgery (CSRF) in zmister2016/mrdoc
Description An attacker is able to log out a user if a logged-in user visits the attacker's website. Proof of Concept history.pushState'', '', '/' document.forms0.submit; Impact This vulnerability is capable of forging users to unintentional logout. More details One way GET could be abused here i...
Business Logic Errors in pimcore/demo
Description There is no check over the number of items that a user can add to the cart. Adding a huge amount of items when updating the cart, causes the server to fail returning a 500 Internal Server Error. Proof of Concept Below POST request causes the server to fail adding 900000000 items of th...
Unable to add Store in Native Workspace/Receiver App from External Machines
On adding Store error "Your account cannot be added" or "Could not detect the specific account" appears On Storefront no errors in event viewer Wireshark trace on NetScaler shows, NetScaler senta request to Storefront server for "/Agservices/Discover", storefront server returns "500 : Internal...
Cross site scripting
Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...
OS Command Injection in fabio286/antares
✍️ Description The application displays the connection error message returned by the server without removing the malicious tags, which leads to XSS attacks. https://imgur.com/3MhhvFp.png https://i.imgur.com/RksNgXF.png Being an application made in electron, an XSS can be scaled to RCE, making it...
Studio-42 Elfinder Remote Code Execution Vulnerability
Studio-42 Elfinder is an open source web file manager. Studio-42 Elfinder suffers from a remote code execution vulnerability that stems from a server error when parsing .phar into php. An attacker could give cause code remote execution through this vulnerability...
studio-42/elfinder 代码问题漏洞
Studio-42 Elfinder is an open source web file manager. Studio-42 Elfinder suffers from a remote code execution vulnerability that stems from a server error when parsing .phar into php. An attacker could give cause code remote execution through this vulnerability...
Http/1.1 Internal Server Error 43531 Error after upgrading to Citrix Gateway 13.0 71.44 and 12.1 60.16
After successful authentication on Citrix Gateway, the enumeration of the published application failed with the error below: Http/1.1 Internal Server Error 43531...
in utmsigep/member-directory
✍️ Description Entering unintended values during the member creation flow causes unusual database state, unhandled exceptions/stack trace disclosure and denial of service due to continuous page crashes. 🕵️♂️ Proof of Concept - Select a member-status/group - Create New Member - Enter an invalid...
App Layering - Error: Server 503 “Azure Server Busy” Error
...
UPchieve: User enumeration through forget password
Vulnerability:- -User enumeration is possible through forgot password feature. steps to reproduce:- -Go to the above selected domain and go to forgot password. -submit random email and then intercept request by burp suit -in response you will get HTTP/1.1 500 Internal Server Error with "err":"No...
