CVE-2019-18225: Undefined Security Weakness

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

Error while downloding the Citrix Gateway Plugin from Downloads Tab of ADC : Forbidden you don't have permission to access

ADC version below 13.0 Error while downloading plugin: "Forbidden you don't have permission to access /vpns/scripts/mac/CitrixAccessGateway.dmg on this server"...

Authentication Bypass Vulnerability in the Management Interface of Citrix Application Delivery Controller and Citrix Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix Application Delivery Controller ADC formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, that, if exploited, could allow an attacker with access to the management...

Problem in taking a backup of ADC VPX from ADM

ADM is unable to take periodic backups of ADC and manual backups fail too. Here are the errors that we see in mpsconfig.log in ADM: SCP: Unable to open a session on 192.168.x.x Tuesday, 8 Oct 19 16:00:08.872 +1100 Error DeviceBackup541 Backup: Error uploading /mps/nssystembackup.pl on Citrix ADC...

CVE-2019-9657

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates used for initiating a VPN session to the Alarm.com infrastructure on the local camera device...

CVE-2018-19588

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

CVE-2018-19588

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

Design/Logic Flaw

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates used for initiating a VPN session to the Alarm.com infrastructure on the local camera device...

Improper access control

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

CVE-2019-9657

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates used for initiating a VPN session to the Alarm.com infrastructure on the local camera device...

CVE-2019-9657

The CVE-2019-9657 entry affects Alarm.com ADC-V522IR 0100b9 devices, where the root cause is the incorrect protection of VPN certificates used to initiate a VPN session to the Alarm.com infrastructure on the local camera device. This results in Incorrect Access Control with an impact on confident...

CVE-2018-19588

CVE-2018-19588 affects Alarm.com ADC-V522IR 0100b9 devices. The connected documents describe an issue of Incorrect Access Control in these devices, with impacts on confidentiality, integrity, and availability rated as HIGH (per the NVD CVSS vectors). No specific root-cause, affected firmware/vers...

CVE-2018-19588

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

CVE-2019-9657: Insufficiently Protected Credentials

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates used for initiating a VPN session to the Alarm.com infrastructure on the local camera device...

CVE-2018-19588: Improper Access Control

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

Sql injection

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...

CVE-2019-12372

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...

CVE-2019-12372

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...

CVE-2019-12372

CVE-2019-12372 affects PETRAWARE Technologies’ pTransformer ADC prior to version 2.1.7.22827. The root cause is SQL injection via the User ID parameter on the login form, enabling an attacker to execute arbitrary SQL commands. Documented PoCs/exploits show bypass of login through crafted input. I...

Petraware pTransformer ADC SQL Injection

Exploit Title: Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form. Date: 28-05-2019 Exploit Author: Faudhzan Rahman Website: https://faudhzanrahman.blogspot.com/ Vendor Homepage: http://www.petraware.com Version: 2.0 CVE : CVE-2019-12372...