5910 matches found
Troubleshooting Retries on Provisioned Virtual Machines
What is a retry? When a target streams a vDisk image, it does so by requesting blocks of data from the PVS server, which in turn replies with the requested data. This data is broken down into several packets called fragments. A retry occurs when a target device requests data from the PVS server a...
StoreFront 3.9 Install Fails With "Message Exception Has Been Thrown by the Target of an Invocation"
StoreFront installation fails with no errors. Event Id 0"Message exception has been thrown by the target of an invocation" In StoreFront "Citrix-DeliveryServicesRoleManage" logs, you find Error Unexpected exception. Message: Exception has been thrown by the target of an invocation.. Stack Trace =...
OSINT Gathering Tool: Inquisitor
OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...
Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269)
A buffer overflow exists in Microsoft Internet Information Services 6.0. The vulnerability is due to improper validation of a long header in HTTP request. A remote attacker could exploit this vulnerability by sending a crafted request over a network to the vulnerable application. Successful...
Ubuntu 14.04/15.10 - User Namespace Overlayfs Xattr Setgid Privilege Escalation Vulnerability
Exploit for linux platform in category local exploits Source: http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/ Introduction Problem description: Linux user namespace allows to mount file systems as normal user, including the overlayfs. As many of those...
The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net
Overview Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does...
Moodle Remote Code Execution Vulnerability (CVE-2017-2641)
The vulnerability CVE-2017-2641 allows an attacker to execute PHP code at the vulnerable Moodle server. This vulnerability actually consists of many small vulnerabilities, as described further in the blog post. Moodle is a very popular learning management system, deployed in many universities...
WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download
import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir...
Hostname verification skipped when custom root certs used
If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check...
Problems activating PVS Target Devices configured for KMS licensing
Your PVS Target Devices are configured for KMS licensing, and after activating the first PVS Target device, activation of other PVS Target Devices devices fail. When you look more closely at the Target Devices you find that the devices all share the same CMID. This means that when building the...
Improper access control
Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...
CVE-2016-8012
Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...
Adobe Flash Player Use After Free Code Execution (APSB17-07: CVE-2017-3002)
A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...
Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0146)
A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...
FusionVM Security Scanner
FusionVM is a vulnerability scanning product. Remote attackers can use FusionVM to detect vulnerabilities on a target server...
GitLab: Gitlab.com is vulnerable to reverse tabnabbing.
Dear GitLab bug bounty team, Summary --- Gitlab.com is vulnerable to reverse tabnabbing, since you use target="blank" on links in the Environments section. F166659 Why does this vulnerability exist? --- The following link is vulnerable to reverse tabnabbing, because it uses target="blank": This...
Huawei EMUI Path Traversal Vulnerability
Huawei EMUI is a set of intelligent terminal human-computer interaction system based on the Android platform developed by China's Huawei Huawei. A path traversal vulnerability exists in Huawei EMUI version 3.1, which originates from the program's failure to adequately verify the path of a specifi...
PVS Write Cache Falling Back to Server Side When Using BDM
When trying to place the target device write cache on local disk it is falling back to the server side cache every time the target device boots. This is only seen when using a BDM boot method, there is no issue visible when using PXE boot...
CVE-2017-2617
It was found that a flaw in hawtio could cause remote code execution via file upload. An attacker could use this vulnerability to upload crafted file which could be executed on a target machine where hawtio is deployed...