82 matches found
CVE-2023-3519-BackdoorCheck
cve-2023-3519-citrix-scanner このスクリプトは、CVE-2023-3519 に対応する基本的な Citrix スキャナーです。 HTTP ヘッダーを確認することで、脆弱な Citrix Gateway/ADC を識別しようとします。 仕組み この脆弱性の分析中に、私たちと CERT-Verbund の仲間は、パッチ適用済みのシステムが同じ HTTP ヘッダー Last-Modified タイムスタンプを持つことに気付きました。 リバースプロキシや高度にカスタマイズされたフロントページは結果を変える可能性があることに注意してください。...
cve-2023-3519-citrix-scanner
cve-2023-3519-citrix-scanner 该脚本是一个针对CVE-2023-3519的基础Citrix扫描器。 我们尝试通过查看HTTP头来识别存在漏洞的Citrix Gateway/ADC设备。 工作原理 在对该漏洞的分析过程中，我们与CERT-Verbund的朋友注意到，已修补的系统具有相同的HTTP头Last-Modified时间戳。 请注意，反向代理和高度定制的前端页面可能会改变结果。 在这种情况下，我们检查时间戳是否可变。如果不变，且时间戳晚于2023年7月18日，则服务器可能已修补。 该脚本不应成为您检查自己是否易受攻击的唯一方法。 我们目前已知的时间戳如下：...
citrixInspector
CVE-2023-3519 Inspector El cve20233519inspector.py es un escáner de vulnerabilidades basado en Python para detectar la vulnerabilidad CVE-2023-3519 en Citrix Gateways. Realiza un análisis pasivo y fingerprinting de los sitios web objetivo para evaluar su vulnerabilidad basándose en una serie de...
CVE-2023-3519
CVE-2023-3519 识别易受CVE-2023-3519漏洞影响的NetScaler Citrix ADC服务器 从 https://github.com/mr-r3b00t/CVE-2023-3519 移植到Python 未经测试。 使用风险自负...
CVE-2023-3519
エクスプロイトリポジトリ Citrix 上のスタックオーバーフロー CVE-2023-3519 ビデオデモンストレーション PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c 免責事項 このコードは、教育目的およびセキュリティ脆弱性の理解における倫理的な使用のみを目的としています。誤用や無許可のアクセスは固く禁じられています。...
citrix-ioc-scanner-cve-2023-3519
Scanner per Indicatori di Compromissione per CVE-2023-3519 Questo repository contiene un'utility per rilevare compromissioni di apparati Citrix ADC correlate a CVE-2023-3519. L'utility e le sue risorse codificano indicatori di compromissione raccolti durante le indagini di Mandiant. Per saperne d...
CVE-2026-3519 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command...
CVE-2026-3519
creationtimestamp| type| source ---|---|--- 2026-04-20 11:13:25+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-371 2026-04-20 16:36:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwvo5btcf2p 2026-04-20 17:21:32+00:00| seen|...
CVE-2022-3519
A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...
CVE-2025-3519
creationtimestamp| type| source ---|---|--- 2025-04-22 09:04:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12812 2025-04-22 12:00:38+00:00| seen| Telegram/Fkk7fCFfvxcN9yUdFFxPMM1IoLmdN1KJ3VKQ-hEiFiNXA 2025-04-22 12:33:00+00:00| seen| https://t.me/cvedetector/23489...
CVE-2025-3519 Replace uploaded files knowing the file upload ID
An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Every uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID UUID. In case a participant of this or another conversation gets access to such a file ID...
SUSE: Security Advisory (SUSE-SU-2024:3519-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:3519-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Media Library Assistant Plugin <= 3.15 is vulnerable to Cross Site Scripting (XSS)
Software Media Library Assistant Type Plugin Vulnerable versions = 3.15 Fixed in 3.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3519 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f2ec0a790f20 Credits Le Ngoc Anh...
CVE-2024-3519 Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang
The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the lang parameter in all versions up to, and including, 3.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...
openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:3519-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller
Exploit Repository Stack-Overflow on Citrix CVE-2023-3519...
Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials
A recently disclosed critical flaw in Citrix NetScaler ADC and Gateway devices is being exploited by threat actors to conduct a credential harvesting campaign. IBM X-Force, which uncovered the activity last month, said adversaries exploited "CVE-2023-3519 to attack unpatched NetScaler Gateways to...