Services Expertise About Us Career Blog DE ARTICLES Search for: The Invisible JavaScript Backdoor Written by Wolfgang Ettlinger on 09.11.2021 A few months ago we saw a post on the r/programminghorror subreddit: A developer describes the struggle of identifying a syntax error resulting from an invisible ... Read More RCE in GridPro Request Management for Windows Azure Pack (CVE-2021-40371) Written by Giulian Guran on 21.10.2021 We recently discovered a vulnerability in GridPro Request Management versions <=2.0.7905 for Windows Azure Pack by GridPro Software. The vulnerability was ... Read More Citrix ADC & Citrix Gateway Vulnerability CVE-2020-8300 Written by Wolfgang Ettlinger on 09.06.2021 We have identified an issue in Citrix ADC and Citrix Gateway and worked with Citrix to resolve it. Citrix has released a patch that addresses the issue as well as an ... Read More DP API encryption ineffective in Windows containers: Publicly Available Cryptographic Keys (CVE-2021-1645) Written by Marc Nimmerrichter on 16.03.2021 We recently discovered a vulnerability in the DP API key management of Windows containers. This vulnerability was assigned CVE-2021-1645 by Microsoft [1] and ... Read More CSRF in JSF 2.0: Predicting CSRF Tokens for Apache MyFaces Written by Wolfgang Ettlinger on 19.02.2021 JavaServer Faces (JSF) is a commonly used server-side web framework. Developers appreciate its relative ease of use while security engineers appreciate its ready-made ... Read More Kurier – 20.11.2021 Written by Marc Nimmerrichter on 20.11.2021 This article is only available ... Read More Profil – 07.11.2021 Written by Aleksandar Lacarak on 07.11.2021 This article is only available ... Read More Trend – Oktober 2021 Written by Ulrich Kallausch on 28.10.2021 This article is only available ... Read More Posts navigation Older Categories Press Security Strategy Technical Analysis Vulnerability Research Archives November 2021 October 2021 September 2021 August 2021 July 2021 June 2021 May 2021 April 2021 March 2021 February 2021 January 2021 December 2020 November 2020 October 2020 August 2020 June 2020 March 2020 February 2020 January 2020 November 2019 October 2019 September 2019 Follow us on Twitter: @certitude_lab & @cert_it_ude Certitude Consulting GmbH Barichgasse 40-42 1030 Vienna Services Expertise About Us Career Privacy statement Legal Notice Imprint Contact © 2020 Certitude Consulting GmbH