PT-2021-15140 · Jetty +1 · Jetty +1

Name of the Vulnerable Software and Affected Versions: Gerrit affected versions not specified Description: The issue arises when any git operation is passed through Jetty, creating a session without an expiry date. Since Jetty does not automatically dispose of the session, multiple git actions ca...

On mobile device on-screen keyboard does not appear in ICA/HDX session automatically

On mobile device on-screen keyboard does not appear when user tap a field to edit in the application of desktop session. User need to manually select keyboard from desktop viewer...

PT-2020-1569 · Openbsd +1 · Opensmtpd +1

Name of the Vulnerable Software and Affected Versions: OpenSMTPD versions 6.6 Description: The issue is related to the smtp mailaddr function in the smtp session.c file of the OpenSMTPD mail daemon, which is used in OpenBSD and other products. It allows remote attackers to execute arbitrary...

Subscribed desktop session fails to launch on CWA 1910 for Mac and macOS Catalina

Denying automation permission after launching subscribed desktop might cause Citrix Workspace App 1910 for Mac to become unresponsive using the macOS Catalina operating system. Affected users will see the spinner to launch a desktop but it will never complete and launch the session. Note:This iss...

[Workspace App for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access their Citrix session, aka mobile thin client. The users usually have a docking station and two identical monitors at their workplace. When these users come back from a meeting and re-dock into...

Multiple vulnerabilities in Denbun

Overview Denbun provided by NEOJAPAN Inc. is a WebMail System. Denbun contains multiple vulnerabilities listed below. Hard-coded credentials for user account CWE-798 - CVE-2018-0680 Hard-coded credentials for the configuration management page CWE-798 - CVE-2018-0681 Improper session management...

MGASA-2017-0043 Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Alt+Tab Does Not Pass Through the VDI in ICA Session

When pressing Alt+Tab while on a VDI in ICA session Full Screen, the apps show up from the endpoint and not from the VDI...

Error: You Cannot Access this Session Because no License are Available

Launching application results in "Error: You Cannot Access this Session Because no License are Available" Check in Licensing Server - under C:\Program Filesx86\Citrix\Licensing\Myfiles - if the file 'Citrixstartup.lic' is missing...

SUSE-SU-2016:2330-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fixed...

Coinbase: Session Issue Maybe Can lead to huge loss [CRITICAL]

Hey Coinbase, I have some found some sessions issues linking your web and the coinbase wallet means the android application, So as the user authenticates from the android app An android device linked is shown on this page : https://www.coinbase.com/settings/securitysettings POC: 1 Open android ap...

CVE-2012-0943

debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...

PayPal Account System - Auth Bypass Session Issue

Document Title: =============== PayPal Account System - Auth Bypass Session Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1057 View: http://www.youtube.com/watch?v=tk9aMBpayS8 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1056 Release Date:...

PayPal Account System - Auth Bypass Session Issue

Document Title: =============== PayPal Account System - Auth Bypass Session Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1057 View: http://www.youtube.com/watch?v=tk9aMBpayS8 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1056 Release Date:...

redhat.su.ghost.bug.txt

Date: Wed, 16 Jun 1999 13:47:52 +0200 From: Roman Ramirez Reply-To: [email protected] Organization: Intercomputer, S.A. To: [email protected] Hello: I think I have found some kind of bug in "su" in Redhat linux versions tested on Redhat 5.2 y Redhat 6.0 The problem seems to be when you...