Error: You Have not Chosen to Trust "Certificate Authority" from MAC Devices

SSL Trust issue on Mac...

CVE-2016-7271

The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level VTL protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability."...

CVE-2016-4046

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...

CVE-2016-4046

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploit...

MS16-150: Security Update for Secure Kernel Mode (3205642)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in Windows Secure Kernel Mode due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted application, to bypass virtual trust...

OpenVPN to Undergo Cryptographic Audit

The next version of the open-source OpenVPN software will be audited by an well-known cryptographer. It was announced Wednesday that Matthew D. Green, PhD, a cryptographer, computer science professor, and researcher at Johns Hopkins University will carry out an audit of the code currently availab...

SPIP 3.1.3 'rac' Parameter XSS Vulnerability

SPIP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:spip:spip"; if...

I'm giving up on PGP

After years of wrestling GnuPG with varying levels of enthusiasm, I came to the conclusion that it's just not worth it, and I'm giving up. At least on the concept of long term PGP keys. This is not about the gpg tool itself, or about tools at all. Many already wrote about that. It's about the lon...

Xfinity Gateway - Cross-Site Request Forgery

Xfinity Gateway - Cross-Site Request Forgery EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST...

Google Removing SHA-1 Support in Chrome 56

The home stretch for SHA-1 deprecation is in full effect with Google on Wednesday announcing its final deprecation deadlines for the Chrome browser, and a cryptographic services provider warning that there’s still a long way to go to get sites off SHA-1 certificates. Google said it will remove it...

Fedora 25 : ca-certificates (2016-d1408c3ba3)

This is an update to the Mozilla CA certificates list version 2.9, which has been published as part of Mozilla NSS 3.26. This update reverts the CA list to the unmodified upstream CA list. The legacy CA modifications, which had previously been shipped with Fedora, have been reverted to an empty...

Google to Distrust WoSign, StartCom Certs in 2017

Google announced Monday that when it ships Chrome 56 in January 2017 the browser will distrust certificates issued by Chinese certificate authoritiesWoSign and StartCom that have made headlines over the past month. The move was somewhat expected after Mozilla announced last week the company would...

OWASP SSL TLS Scanning : DeepViolet

DeepViolet is a TLS/SSL scanning API written in Java. To keep DeepViolet easy to use, identify bugs, reference implementations have been developed that consume the API. If you want to see what DeepViolet can do, use it from the command line in your scripts or use the graphical tool from the comfo...

Unable to authenticate users to use WiFi using Cisco-ISE.

If you see the following error whilst testing the connectivity from CIsco-ISe to the XenMobile sever. "Connection failed: there is a problem with the server Certificates or ISE trust store."...

Error: "An Error Occurred While Making The Requested Connection"

When starting XenDesktop from the Web Interface screen, the following error message might be displayed: “An error occurred while making the requested connection” Upon examining the broker logs, the following error message is displayed: “The Citrix Broker Service failed to validate a user's...

Error: "Untrusted Enterprise Developer" When Launching Secure Apps on iOS

Users who have upgraded their Apple devices to iOS 9 are unable to launch Secure Apps. The apps appear to be greyed out. When the user clicks on Secure Apps, the following error message is displayed: “Untrusted Enterprise Developer” Users with older iOS versions are prompted to trust the...

Mozilla Wants to Drop WoSign as Trusted CA

Mozilla has accused a Chinese Certificate Authority of back-dating SHA-1 certificates to get around restrictions barring deprecated certs from being trusted, and is ready to ban the CA for one year. The back-dating is just one of many violations derived after a lengthy investigation of WoSign and...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...