297 matches found
CVE-2020-8191
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting XSS...
CVE-2020-10111
Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization...
NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server
This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...
NetScaler: Securing HA Management IPs and FQDN with SAN Certificates
Securing Management IP and FQDN for High Availability Citrix ADCs with SAN Certificates Ensuring the secure management of your Citrix Application Delivery Controllers ADCs in a High Availability HA setup is crucial for maintaining the integrity and confidentiality of your infrastructure. This...
Citrix ADC (NetScaler) Directory Traversal Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Directory Traversal Scanner', 'Description' = % This module exploits a directory traversal vulnerability CVE-2019-19781 with...
Citrix ADC (NetScaler) Bleed Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Bleed Scanner', 'Description' = %q This module scans for a vulnerability that allows a remote, unauthenticated attacker to...
Citrix ADC - EPA Scans failing after library upgrade for CWA version check
EPA libraries from Jan 18 OPSWAT version 4.3.3906.0 failing EPA checks for CWA version. If the EPA library version is downgraded to the Nov 2023 libraries OPSWATversion 4.3.3801.0, EPA check is working as expected...
Netscaler Troubleshooting (Tools, Logs, Performance)
Introduction This article provides a list of Knowledge Base resources on how to troubleshoot, setup and diagnose most common issues based on memory, CPU, license. Overview of the Issue Below list of articles will provide you an outline of logs which will help you to easily identify a possible CPU...
VulnCheck KEV: CVE-2020-8191
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting XSS...
SSH Public Key - No supported authentication methods available (server sent public key)
Citrix ADC: SSH is not working...
After upgrade to 14.1 ADC GUI response is slow resulting in operation timeout with tacacs auth
After upgrading Citrix ADC to version 14.1-8.50 from version 13.1, users are facing management GUI access issue with Tacacs authentication. Almost all pages are opening very slowly and are giving error Operation timeout. Disabling RbaOnResponse resolves the issue as a workaround...
VulnCheck KEV: CVE-2023-24488
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting...
Metasploit Weekly Wrap-Up
PTT for DCSync This week, community member smashery made an improvement to the windowssecretsdump module to enable it to dump domain hashes using the DCSync method after having authenticated with a Kerberos ticket. Now, if a user has a valid Kerberos ticket for a privileged account, they can run...
[NetScaler-Azure] NetScaler may RESET TCP connections randomly, RESET Code: 8201
NetScaler on Azure, you may observe that some TCP connections can be RESET by NetScaler unexpectedly, RESET code is 8201. For more information about Reset code, please see:Citrix ADC NetScaler Reset Codes reference...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
CVE-2023-4966-POC Proof Of Concept for NetScaler CVE-2023-4966...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
CVE-2023-4966-POC POC for Citrix NetScaler CVE-2023-4966 ---...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
CVE-2023-4966-POC POC for Citrix NetScaler CVE-2023-4966 ---...
Citrix ADC (NetScaler) Bleed Scanner
This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory for a target Citrix ADC server. The leaked memory is then scanned for session cookies which can be hijacked if found. Module Options msf use auxiliary/scanner/http/citrix/bleedcve20234966 msf...
NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 12.1, 12.1-FIPS before 12.1-55.300-FIPS, 13.0 before 13.0-92.19, 13.1 before 13.1-49.15, 13.1-FIPS before 13.1-37.164-FIPS, or 14.1 before 14.1.8.50. It is therefore affected by multiple...