How to troubleshoot error " Access to company network not available" while enrolling to xenmobile ?

Symptoms : After putting XMS FQDN if we receive error "Access to company network not available " , click on Report and collect logs LOG ANALYSIS : Below error message indicates that user is entering incorrect FQDN or the DNS is unable to resolve the FQDN. HTTPClientCertCredID=null,...

WordPress: DOM Based XSS In mercantile.wordpress.org

Hello, There is a DOM XSS in mercantile.wordpress.org in the apparel subcat. For example: https://mercantile.wordpress.org/product-category/apparel/?subcat= Steps To Reproduce 1. Go to https://mercantile.wordpress.org 2. Click on apparel 3. In the url bar add : /?subcat=" The domain will pop-up. ...

INFOR EAM 11.0 Build 201410 - filtervalue SQL Injection Vulnerability

Exploit for multiple platform in category web applications SQL injection in INFOR EAM V11.0 Build 201410 search fields web/base/.. via filtervalue parameter ------------------- Assigned CVE: CVE-2017-7952 Reproduction steps: ------------------- 1. Log in with your EAM account 2. Go to any page wi...

INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields

INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields Stored XSS in INFOR EAM V11.0 Build 201410 via comment fields ------------------- Assigned CVE: CVE-2017-7953 Reproduction steps: ------------------- 1. Log in with your EAM account 2. Go to the jobs page 3. Click on...

INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection

SQL injection in INFOR EAM V11.0 Build 201410 search fields web/base/.. via filtervalue parameter ------------------- Assigned CVE: CVE-2017-7952 Reproduction steps: ------------------- 1. Log in with your EAM account 2. Go to any page with a search or filter field in it for example...

INFOR EAM 11.0 Build 201410 SQL Injection

SQL injection in INFOR EAM V11.0 Build 201410 search fields web/base/.. via filtervalue parameter ------------------- Assigned CVE: CVE-2017-7952 Reproduction steps: ------------------- 1. Log in with your EAM account 2. Go to any page with a search or filter field in it for example...

Apache Cordova Android 5.2.2 Information Leak Vulnerability

Apache Cordova Android versions 5.2.2 and below suffer from an internal system information leak. CVE-2016-6799: Internal system information leak Severity: High Vendor: The Apache Software Foundation Versions Affected: Cordova Android 5.2.2 and below Description: The application calls methods of t...

Uber: phone number exposure for riders/drivers given email/uuid

Hi , Summary I have found one more vulnerable endpoint that is leaking user's phone number when i submit UUID in the request. This attack works for both Driver and Rider. Security Impact We can get any Rider or Driver private phone number by knowing his UUID. Reproduction Steps 1 . Enter victim's...

Weblate: Running 2 accounts with a single email

Hi, While testing, I found a logic flaw which made me to make two accounts with a single email Reproduction Steps - You need 3 emails Gmail to be precise - Register 2 accounts with 2 different emails - On account 1, add a new email 3rd email using the Google Auth - Then delete the previous email ...

How to Integrate StoreFront and XenMobile when XenMobile is enabled with Domain and Certificate Based Authentication

This article will guide you with the steps to enable XenMobile server and StoreFront Server integration when XenMobile environment is enabled withCertificate + Domain based authentication. To achieve the above use case, you as an admin need to setup the following. 1. Configure/Enable XenMobile...

Demo to configure profile management through HDX policies

If you want to test to configure Citrix UPM ,you feel confused about the detail steps.This article will guide you one by one...

Error: "StoreFront Store Service Probe Failed" While Using Citrix SCOM Management Pack for StoreFront

While using the Citrix SCOM Management Pack for StoreFront MPSF, you might come across an error, StoreFront Store Service Probe failed, that triggers an alert in the SCOM Console. Let’s troubleshoot and understand the possible causes and solutions for this error. Possible reasons for this issue...

Troubleshooting Secure Mail Issues with iOS Push Notifications

This article discusses how to diagnose and fix issues related to Secure Mail push notifications on iOS devices. Background Push notifications for Secure Mail allow users to receive updates when the app refreshes, and notifications about email and calendar activitythrough the Apple Push Notificati...

CloudBees Jenkins Pipeline: Classpath Steps Plugin Security Bypass Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability in the CloudBees Jenkins Pipeline: Classpath Steps plugin allows remote attackers to submit a special request to bypass security restrictions and...

how to fix stale CIFS mounts on XenServer

how to fix stale CIFS mounts on XenServer...

F5 Networks BIG-IP : Linux kernel SCTP vulnerability (K37510383)

The sctpinit function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service panic or memory corruption by creating SCTP sockets before all of the steps have finished. CVE-2015-5283 ...

Uber: pam-ussh may be tricked into using another logged in user's ssh-agent

Summary https://github.com/uber/pam-ussh was open-sourced today kudos! and is presumably used within Uber's infrastructure. This is a PAM module written a Go that "will authenticate a user based on them having an ssh certificate in their ssh-agent signed by a specified ssh CA." A cursory look at...

How to Configure Certificate Based Authentication for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management...

Microsoft Certificate Authority Configuration for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management in MSCA...

Update Rollup 7 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 7 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions for...