CVE-2023-2749 A Gain Information vulnerability was found on Download Center.

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected...

CVE-2023-2749

CVE-2023-2749 affects ASUSTOR ADM 4.0+ Download Center, where improper validation of the user-submitted file path could allow an attacker to access sensitive files or directories without proper permissions. Affected versions include Download Center 1.1.5.r1280 and below. The public sources descri...

ASUSTOR Data Master 路径遍历漏洞

ASUSTOR Data Master is an operating system exclusively on the ASUSTOR NAS from China's ASUS, featuring a tablet-like graphical interface comparable to a zero-learning curve, making it easy to get started right away. A security vulnerability exists in ASUSTOR Data Master ADM that stems from an...

CVE-2023-2509

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

Cross site scripting

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

CVE-2023-2509

CVE-2023-2509 is an XSS vulnerability affecting ASUSTOR ADM products (ADM 4.0.6.REG2, 4.1.0 and below; ADM 4.2.1.RGE2 and below) as well as LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below. The root cause is a cross-site scripting flaw that could allow an attacker to inject mal...

CVE-2023-2509 A Cross-Site Scripting(XSS) vulnerability was found on ADM

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

CVE-2023-2509 A Cross-Site Scripting(XSS) vulnerability was found on ADM

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

ADM GUI is down and users only have access via SSH

Users are unable to get any access to ADM GUI on 13.1...

All ADC using pooled license entered grace period

All Netscaler Instances using Pooled License via ADM agent entered grace period...

CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

PT-2023-19786 · Vinga · Vinga Wr-Ac1200

Name of the Vulnerable Software and Affected Versions: Vinga WR-AC1200 versions 81.102.1.4370 and before Description: A password vulnerability allows a remote attacker to execute arbitrary code via the password parameter at the "/goform/sysTools" and "/adm/systools.asp" endpoints. This issue has...

CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

CVE-2023-30770 A stack-based buffer overflow vulnerability was found in the ADM

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below...

ADC - 13.1 - unable to update licenses from SDX to ADM

When licensing the SDX through ADM it throws the error "Connection to License server failed"...

ADM Service not showing Host ID

When customer goes into ADM Service portal and navigates to Pooled Licensing section, the Host ID is not populated and shows a blank value...

ADM Service: How to identify which VIPs belong to which NetScaler

To quickly identify within ADM / ADM Service in which NetScalers a specific VIP LB/CS/GW,etc. may be configured...

How to migrate an existing ADM instance to a newly deployed ADM server.

To demonstrate how to migrate an existing ADM instance to a newly deployed ADM server...

[ADC] ICA sessions are NOT sent to ADM with "Skip Code [169]"

You may observe some ICA sessions are displayed in GUI Configuration Citrix Gateway ICA Connections, but not in ADM HDX Insight. NetScaler ADC ns.log displays the following error: ICARECORD: Skipping ICA flow: ...... Skip Code 169...

K64709522: Multiple Zip Slip vulnerabilities

Security Advisory Description CVE-2018-1002200 plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...