CVE-2023-24489-poc

CVE-2023-24489-poc PoC для CVE-2023-24489 на bash. Для работы нужен файл target.txt со списком целей, которые вы хотите проверить, в следующем формате: https://example1.com https://example2.com https://example3.com Файл должен находиться в той же директории, где выполняется bash-скрипт. Пожалуйст...

CVE-2021-22941

Использование python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Ссылка https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

citrix-cve-2021-22941-lab

⚠️ 면책 조항 이 문서는 테스트 목적으로 CVE-2021-22941 취약점을 모의 시뮬레이션 한 것입니다. 모의 서버는 공식 CVE 및 익스플로잇 저장소에 문서화된 대로 Upload.aspx 엔드포인트에 인증 없이 접근할 수 있고 LocalFile GUID 응답을 반환하는 실제 취약한 동작을 재현합니다. 왜 모의 시뮬레이션인가? Citrix ShareFile Storage Zones Controller는 독점 엔터프라이즈 소프트웨어입니다 실제 취약한 인스턴스를 구축하려면 라이선스 소프트웨어와 복잡한 인프라가 필요합니다 이 모의...

CTX-CVE-2020-7473

CTX-CVE-2020-7473 Проверка уязвимости Citrix Sharefile Краткие сведения об исследовании CTX-CVE-2020-7473 Сделано 2020.04.16 Проверка уязвимости: Откройте в веб-браузере https://yoursharefileserver.companyname.com/UploadTest.aspx Или curl https://yoursharefileserver.companyname.com/UploadTest.asp...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

Exploit for Improper Access Control in Citrix Sharefile_Storagezones_Controller

Vulnerability Details - CVE: CVE-2021-22941 - Severity...

EUVD-2014-1971

Malware in sbrugna...

EUVD-2021-10061

Malware in sbrugna...

EUVD-2019-16761

Malware in sbrugna...

EUVD-2018-8757

Malware in sbrugna...

EUVD-2020-29813

Malware in sbrugna...

EUVD-2021-10023

Malware in sbrugna...

EUVD-2019-16762

Malware in sbrugna...

EUVD-2018-8756

Malware in sbrugna...

CVE-2021-22891

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller...

CVE-2021-22941

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller...

CVE-2020-8982

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...

CVE-2020-8983

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

VulnCheck KEV: CVE-2020-8982

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix...

Citrix ShareFile StorageZones file upload

Added: 08/28/2023 Background ShareFile is a file sharing service. StorageZones are user-maintained storage for ShareFile data. Problem A vulnerability in ShareFile StorageZones Controller allows remote attackers to upload arbitrary files, leading to command execution. Resolution Upgrade to...