How do I Configure Unified Gateway for Common Enterprise Applications

This article describes how to configure Unified Gateway for common enterprise applications. Use Case To do AAA and single sign-on for common enterprise applications like SharePoint or Exchange at NetScaler Unified Gateway. Unified Gateway is a single point of access for all corporate applications...

SAML Raider - SAML2 Burp Extension

SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachelor thesis at the Hochschule für Technik...

Error: "To Use Desktop Lock Feature, Make Sure Receiver is Installed and is Working Fine With Single Signon" While Installing Desktop Lock

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Trying to install and activate Desktop Lock, but cannot get it to install. "To use Desktop Lock...

How to Authenticate Multiple Domains using NetScaler with ICA Proxy and Single Sign-on

...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-08319)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the HTTP/2 implementation of Mozilla Firefox prior to version 43.0. A remote attacker can exploit this vulnerability to cause a denial of service integer...

How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication

Citrix Workspace app is the new universal app for all workspace services, that will encompass all Citrix clients and app capabilities over time. This article describes how to install Citrix Receiver for Windows and configure Single Sign-on authentication to XenApp/XenDesktop. After configuring...

UBUNTU-CVE-2015-7218

The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service integer underflow, assertion failure, and application exit via a single-byte header frame that triggers incorrect memory allocation...

CVE-2015-6790

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as...

[SECURITY] Fedora 21 Update: cyrus-imapd-2.4.18-1.fc21

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

Apache CXF SAML Web SSO Module Authentication Bypass Vulnerability

Apache CXF is an open source service framework for the use of JAX-WS, JAX-RS and other front-end programming API compilation and development services. A security vulnerability in the SAML Web SSO module of Apache CXF allows remote attackers to bypass authentication by constructing specially craft...

[SECURITY] Fedora 21 Update: ipsilon-1.1.1-2.fc21

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 22 Update: ipsilon-1.1.1-2.fc22

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 23 Update: ipsilon-1.1.1-2.fc23

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

The vulnerability of the Oracle E-Business Suite system allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle Application Object Library component specifically, the Single Signoff sub-component within the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

[ERPSCAN-15-026] Oracle E-Business Suite - SQL injection Vulnerability

ADVISORY INFORMATION Title: Oracle E-Business Suite SQL injection Advisory ID: ERPSCAN-15-026 Advisory URL: http://erpscan.com/advisories/erpscan-15-026-oracle-e-business-suite-sql-injection-vulnerability/ Date published: 20.10.2015 Vendors contacted: Oracle 2. VULNERABILITY INFORMATION Class:...

[SECURITY] Fedora 23 Update: ipsilon-1.0.0-5.fc23

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

CVE-2007-1886

Integer overflow in the strreplace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06838)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4. Allows remote attackers to affect confidentiality via unspecified vectors related to sing...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06836)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, 12.2.4. Allowing a remote attacker to pass unspecified vectors related to single sign-on would compromise...

CVE-2015-4884

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon...