November 29, 2024
SUBJECT: Mitigation for Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (CVE-2024-21887) TECH STACK: Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) DATE(S) ISSUED: 01/12/2024 NVD […]
November 29, 2024
Citrix NetScaler HTTPS Redirect Cross-Site Scripting (XSS) Vulnerability Report Executive Summary This report outlines a detected vulnerability in Citrix NetScaler devices that are configured to perform […]
November 29, 2024
Subject: Mitigation Strategy for Apache 2.2.x < 2.2.33-dev / 2.4.x < 2.4.26: Addressing Critical Vulnerabilities Tech Stack: Apache HTTP Server Date(s) Issued: Criticality: Overview: Multiple critical […]
November 29, 2024
PHP 5.4.x < 5.4.38 Multiple Vulnerabilities (GHOST) Report Executive Summary This report details critical vulnerabilities identified in PHP versions prior to 5.4.38, impacting the security and […]
November 29, 2024
SUBJECT: Mitigating PHP 5.6.x < 5.6.27 Multiple Vulnerabilities TECH STACK: PHP DATE(S) ISSUED: 10/13/2016 NVD Last Modified: 04/11/2022 CRITICALITY: CRITICAL 9.8 OVERVIEW: This document provides a […]
November 29, 2024
To safeguard Apple Remote Desktop (ARD) VNC (Virtual Network Computing), a tool that enables remote access and management of Apple devices, follow these general remediation instructions […]
November 29, 2024
Subject: Unsupported Windows OS Detection Tech Stack: Date Issued: Criticality: Overview: Attack Mechanisms: Affected Systems: Mitigation Solution: References:
November 29, 2024
Subject: Python Unsupported Version Detection Tech Stack: Date Issued: Criticality: Overview: Attack Mechanisms: Affected Systems: Mitigation Solution: References:
November 29, 2024
UBJECT: CVE-2021-26855 – Microsoft Exchange Server Remote Code Execution Vulnerability TECH STACK: Microsoft Exchange Server DATE(S) ISSUED: 03/16/2021 CRITICALITY: HIGH OVERVIEW: In the attacks CVE-2012-1823 was observed, the threat actor […]
November 29, 2024
SUBJECT: CVE-2023-4966 Citrix NetScaler ADC and Gateway Vulnerability (Citrix Bleed) TECH STACK: Citrix NetScaler ADC and NetScaler Gateway Appliances DATE(S) ISSUED: First issued on Oct. 10, 2023, with subsequent […]
November 29, 2024
SUBJECT: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) TECH STACK: Citrix Application Delivery Controller (ADC), Citrix Gateway DATE(S) ISSUED: 12/27/2019 NVD Last Modified: 01/20/2023 CRITICALITY: CRITICAL […]
November 29, 2024
Addressing PHP Vulnerabilities in Common Technologies In the ever-evolving landscape of cybersecurity, keeping software up to date is crucial for maintaining the security and functionality of […]