Lucene search
+L

5606 matches found

Kitploit
Kitploit
added 2026/09/13 6:02 p.m.5 views

CVE-2019-19781

CVE-2019-19781 Exploit de Ejecución Remota de Código para Citrix Application Delivery Controller y Citrix Gateway CVE-2019-19781 Uso : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE ejemplo : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/13 5:56 p.m.6 views

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Vídeo Síguenos Vulnmachines YouTube Twitter Facebook...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/13 4:48 p.m.11 views

CVE-2025-7775

CVE-2025-7775 版本检测 PowerShell 还有一个很酷的基于文件哈希的方法: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py 你也可以使用客户端二进制文件来枚举版本(不确定是否需要身份验证……自2023年以来我就没有深入看过这些东西了) 默认页面上的时间戳最近似乎显示 20/08/2025 已被修补。json.gz 文件需要进行流式处理,因为浏览器似乎会尝试将其渲染为 JSON(这不起作用)...

9.8CVSS8.4AI score0.19631EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 4:35 p.m.5 views

citrix_bleed_2

Citrix Bleed 2 PoC Scanner CVE-2025-5777 This script is a Proof-of-Concept PoC scanner for the hypothetical vulnerability "Citrix Bleed 2" CVE-2025-5777. It is designed to detect potential memory leaks from Citrix ADC devices by sending oversized requests and analyzing the responses for sensitive...

9.3CVSS8.2AI score0.99953EPSS
SaveExploits20
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.22 views

Citrix StoreFront Server - XML External Entity

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. id: CVE-2019-13608 info: name: Citrix StoreFront Server - XML External Entity author: daffainfo severity: high description: | Citrix StoreFront Server before 1903, 7.15 LTSR...

7.5CVSS7.2AI score0.30041EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.73 views

Citrix XenMobile Server - Local File Inclusion

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference: -...

7.5CVSS7.6AI score0.48656EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.129 views

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

10CVSS8.5AI score0.39335EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.65 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the traceroute function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic...

10CVSS8.4AI score0.39544EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.79 views

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

6.5CVSS6.8AI score0.88411EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.156 views

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

6.5CVSS7.1AI score0.10695EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.113 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

10CVSS8.4AI score0.42551EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.109 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

10CVSS8.4AI score0.42551EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.94 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

10CVSS8.4AI score0.39544EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.75 views

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

9.8CVSS8AI score0.97343EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.62 views

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

8.2CVSS7.6AI score0.57633EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.64 views

Citrix ADC/Gateway - Cross-Site Scripting

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 contain a cross-site scripting vulnerability due to improper input validation. id: CVE-2020-8191 info: name: Citrix...

6.1CVSS6.7AI score0.26136EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.80 views

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. id: CVE-2020-8982 info: name: Citrix ShareFile StorageZones =5.10.x - Arbitrary File Read author: dwisiswant0 severity: high...

7.5CVSS7.5AI score0.27149EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.30 views

Citrix SD-WAN and NetScaler SD-WAN - SQL Injection

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 contain an SQL injection vulnerability. An unauthenticated attacker can exploit improper validation of input in specific components, which could allow for execution of arbitrary SQL queries against the backend database...

9.8CVSS8AI score0.94131EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.145 views

Citrix StoreFront - Cross-Site Scripting

Reflected Cross-Site Scripting issue which is exploitable without authentication. This vulnerability was exploitable through coercing an error message during an XML parsing procedure in the SSO flow. id: CVE-2023-5914 info: name: Citrix StoreFront - Cross-Site Scripting author: DhiyaneshDK...

7.2CVSS6.5AI score0.73142EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:17 p.m.9 views

CVE-2023-4966

CVE-2023-4966 CitrixBleed Programm to exploit Citrix Applications with a range of ip adresses here is how you compile it for windows, macOS, or Linux root@kitploit: GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linux...

9.4CVSS7.5AI score0.99999EPSS
SaveExploits15
Rows per page
Query Builder