397 matches found
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
CVE-2025-12101-checker
CVE-2025-12101-checker Simple Python PoC to check Citrix NetScaler ADC / Gateway instances for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload. ⚠️ Use this tool only on systems you own or are explicitly authorized to test. 🔍 Background CVE-2025-12101...
CVE-2026-119211
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionpage' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-118193
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionpage' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-119211 AAA Autoload Optimizer <= 1.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'option_page' Parameter via 'all' Hook
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionpage' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-119211
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.7.0 . The flaw is caused by insufficient input sanitization and output escaping of the 'option_page' parameter. An authenticated attacker with subscriber-level ...
WordPress AAA Autoload Optimizer plugin <= 1.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Maciej Komorowski in WordPress Plugin AAA Option Optimizer versions = 1.7.0...
CVE-2026-119211: progressplanner AAA Autoload Optimizer: The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'option_page'…
The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionpage' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Detection Artifact Generator for Citrix NetScaler CVE-2026-8452 See our blog post for technical details. Detection in Action python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / /...
CVE-2023-4966-POC
CVE-2023-4966-POC Proof Of Concept for NetScaler CVE-2023-4966 Vulnerability Description This Python script exploits CVE-2023-4966, a critical vulnerability in Citrix ADC instances that allows unauthenticated attackers to leak session tokens. The vulnerability is assigned a CVSS score of 9.4 and ...
ca-certificates: Fix of CVE-2026-114406
Comodo AAA Services root AAA Certificate Services is no longer trusted for TLS server authentication through the legacy bundle: it issued the Sectigo cross-signs of the compromised eMudhra intermediates Mozilla bug 2083449. Its legacy e-mail and code-signing trust is kept...
aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +933 more potentially affected by unknown CVE via nltk (>=3.0.0, <=3.10.3)
nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: GHSA-J456-XH4H-CPF2...
Debian dsa-6572 : ca-certificates - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6572 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6572-1 [email protected] https://www.debian.org/security/...
Citrix NetScaler ADC and Gateway Memory Overflow Checker
Citrix NetScaler ADC and Gateway versions before the vendor-provided fixed builds contain a memory overflow vulnerability when configured as a Gateway or AAA virtual server. This tool evaluates operator-reported version and configuration evidence offline...
Citrix NetScaler ADC / Gateway Security Advisory
Citrix NetScaler ADC and Gateway versions before the documented fixed builds contain a Gateway / AAA memory corruption vulnerability when a Gateway or AAA virtual server is configured...
Citrix NetScaler ADC and Gateway 14.1 Authentication Bypass
Citrix NetScaler ADC and Gateway versions before the vendor-provided fixed builds contain an authentication bypass using an alternate path when configured as Gateway or AAA virtual servers, subject to version-specific SAML conditions...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Citrix Netscaler_Application_Delivery_Controller
netscaler-cve-2026-19490-check Standalone d...
Exploit for Classic Buffer Overflow in Citrix Netscaler_Application_Delivery_Controller
netscaler-cve-2026-88775-check Standalo...
