5239 matches found
An unauthenticated attacker can generate a sizeable CPU load on a Confluence server with a single request.
h3. Issue Summary Confluence has an API endpoint, which combines multiple js resources in a single response:...
CVE-2020-13179
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure...
Information disclosure
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure...
CVE-2020-13179
The CVE-2020-13179 vulnerability affects Teradici PCoIP Standard Agent for Windows and Teradici PCoIP Graphics Agent for Windows prior to version 20.04.1. The root cause is that Broker Protocol messages are not cleaned up from server memory, which may allow an attacker to read confidential inform...
CVE-2020-13179
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure...
Trump's TikTok Drama Is a Distraction
As the White House zeroes in on a single app, some experts say more pressing issues are going by the wayside...
Extract and Use Custom Attributes from Active Directory for NetScaler Appliance
Although Active Directory AD username and realm/domain attributes are often sufficient for identifying a user, at times you need even more details of the user. For example, "UserPrincipalName" that contains the user’s domain might represent a forest level realm and not the organization to which t...
SQL Injection Vulnerability in niushop_b2c Single Merchant E-commerce System
niushop b2c single merchant e-commerce system is a thinkphp5.0 MySQL development language development, completely open source mall system can be used for enterprises, individuals to establish their own online free mall. niushopb2c single merchant e-commerce system SQL injection vulnerability ,...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2020-4464)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
Citrix Single Sign-On (SSONSVR.exe) Fails to Start on Computers using Intel Credentials Manager
Pass through authentication is not working and SSONSVR.exe does not appear in Task Manager...
DNS Query Responds with Only One IP to Client PC When Connected Through Citrix Gateway Full VPN
If nslookup command is run fromwindows command prompt of a client PC connected through CitrixGateway with full VPN, split tunnel set as "OFF" and DNS configured as “Remote", thenthe output of the command returns only one back-end server IP.When connected to other full VPN, nslookup output returns...
Zoom Addresses Vanity URL Zero-Day
A previously undisclosed bug in Zoom’s customizable URL feature has been addressed that could have offered a hacker a perfect social-engineering avenue for stealing credentials or sensitive information. Disclosed by Zoom and Check Point on Thursday, the security flaw existed in the “Vanity URL”...
FreeBSD : py-matrix-synapse -- multiple vulnerabilities (d9f686f3-fde0-48dc-ab0a-01c2fe3e0529)
Matrix developers report : Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. - A malicious homeserver could force Synapse to reset the state in a room to a small subset o...
Bolt CMS 3.7.0 XSS / CSRF / Shell Upload
Bolt CMS = 3.7.0 Multiple Vulnerabilities Author - Sivanesh Ashok | @sivaneshashok | stazot.com Date : 2020-03-24 Vendor : https://bolt.cm/ Version : = 3.7.0 CVE : CVE-2020-4040, CVE-2020-4041 Last Modified: 2020-07-03 -- Table of Contents 00 - Introduction 01 - Exploit 02 - Cross-Site Request...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.1 security update
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
py-matrix-synapse -- multiple vulnerabilities
Matrix developers report: Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. A malicious homeserver could force Synapse to reset the state in a room to a small subset of t...
RHEL 6 / 7 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 (Important) (RHSA-2020:2816)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2816 advisory. Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Security Fixes: keycloak: Lack of checks in...
RHEL 6 / 7 / 8 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7 (Important) (RHSA-2020:2814)
The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2814 advisory. Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3 Security Fixes: keycloak: Lack of check...
npmjs-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser
websocket-extensions npm module prior to 0.1.4 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...
