CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ ADVERTENCIA Esta herramienta es solo para fines educativos y de pruebas autorizadas. No utilizar en sistemas sin permiso explícito del propietario. 📋 Descripción Herramienta de detección para CVE-2026-3055 que identifica...

CVE-2026-3055

CVE-2026-3055 - Vulnerabilidad de Seguridad Severidad: N/A CVSS: N/A Impacto: N/A Publicado: 2026-03-23 Legal Solo para pruebas de seguridad autorizadas. Causa raíz versión corta Validación de entrada insuficiente en NetScaler ADC y NetScaler Gateway cuando se configura como SAML IDP, lo que...

CitrixHoneypot

Honeypot para CVE-2019-19781 Citrix ADC Detecta y registra intentos de escaneo y explotación de CVE-2019-19781. Requisitos: python3 openssl Uso: 1. Clona el repositorio: git clone https://github.com/MalwareTech/CitrixHoneypot.git CitrixHoneypot && cd CitrixHoneypot 2. Crea los directorios ssl y...

CVE-2023-3519

CVE-2023-3519 Escáner de NetScaler Citrix ADC CVE-2023-3519 Un escáner simple para encontrar netscalers y ver la fecha de última modificación en el encabezado de la respuesta HTTP este proyecto es un escáner hecho por mí en C usando el código fuente de mrr3b00t en powershell...

cve-2019-19781

CVE-2019-19781 Esto se subió únicamente porque otros investigadores publicaron su código primero. Habríamos preferido mantenerlo oculto por más tiempo mientras los defensores tenían tiempo adecuado para parchear sus sistemas. Estamos a favor de la divulgación responsable; en este caso, el gato ya...

CVE-2019-19781

本文是关于CVE-2019-19781中登记的Citrix ADC和Gateway目录遍历远程代码执行RCE的文章。 该远程代码执行漏洞是由于在/vpn路径下的../vpns中对smb.conf文件的验证不充分而导致的。 窃取系统配置信息或服务器信息 1. Citrix 1989年成立的美国跨国软件公司 提供服务器、应用程序和桌面虚拟化、网络、SaaS、云计算技术 在存在漏洞的Citrix产品系列中，由于缺乏输入值验证而导致的目录遍历漏洞 - 由于直接使用请求路径而无需验证输入而导致的漏洞...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Este exploit utiliza direcciones y shellcode para Citrix VPX 13.1-48.47. Para el artículo completo, haga clic aquí. Uso Se requiere NASM para compilar el shellcode. $ sudo apt install nasm El shellcode incluido descargará y ejecutará un script de shell desde un servid...

CitrixBleed-2-CVE-2025-5777-PoC-

CitrixBleed 2 CVE-2025-5777 终极解析 An Out-of-Bounds Memory Read in NetScaler ADC / Gateway — 从成因到攻防演练的全景手册 poc用法：python3 poc.py https://gateway.example.com exp用法：python3 exp.py https://gateway.example.com admin 7acbb35f4d... 目录 0x00 引言 / 速览 0x01 背景：NetScaler 架构与 CitrixBleed 1 回顾 0x02...

CVE-2020-0601

CVE-2020-0601 Remote Code Execution Exploit CVE-2020-0601- Citrix Application Delivery Controller & Gateway...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fixed potential array out-of-bound access issues. A sentinel was added at the end of the maps to prevent potential array out-of-bound access in the iio core...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mfd: pcf50633-adc: Fixed a potential memory leak in pcf50633adcasyncread. The variable req is allocated in pcf50633adcasyncread, but adcenqueuerequest might fail to insert the req into the queue. We need to check the return value...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ina2xx: avoid NULL pointer dereference on OF device match The affected lines resulted in a NULL pointer dereference on our platform because the device tree contained the following list of compatible strings:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fixed the refcount leak in adiaxiadcattachclient. The ofparsephandle function returns a node pointer with a refcount incremented. We should use ofnodeput on it when there is no longer a need for it. Add the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626 – Use DMA-safe memory for spiread. Add a DMA-safe buffer and use it for spiread, instead of using a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we simply use a u8 arra...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124 – Fixed a potential overflow issue due to non-sequential channel numbers. Channel numbering must start at 0, and there should be no gaps between channels. Otherwise, it’s possible to exceed the available storage...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: iio: adc: menz188adc: Fixed a resource leak in the error handling path. If iiodeviceregister fails, a previous ioremap call remains unbalanced. The error handling path has been updated, and the missing iounmap call has been added...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Citrix Netscaler_Application_Delivery_Controller

Citrix NetScaler SAML nFactor Context Authentication Bypass —...

The vulnerability of the ads1298_get_scale() function in the drivers/iio/adc/ti-ads1298.c driver for various types of built-in sensor sensors in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ads1298getscale function in the drivers/iio/adc/ti-ads1298.c driver for various types of embedded sensors in Linux operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mt6358_read_imp() function in the drivers/iio/adc/mt6359-auxadc.c file of various types of embedded sensors in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the mt6358readimp function in the drivers/iio/adc/mt6359-auxadc.c file of various types of embedded sensors in the Linux operating system is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the `nxp_sar_adc_write_raw()` function in the `drivers/iio/adc/nxp-sar-adc.c` module of various types of embedded sensor drivers for Linux operating systems allows a malicious actor to cause system failures.

The vulnerability of the nxpsaradcwriteraw function in the iio/adc/nxp-sar-adc.c module of the drivers for various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...