CVE-2021-22941

使用方法 python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 参考 https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

citrix-cve-2021-22941-lab

⚠️ 免責事項 これは、テスト目的でCVE-2021-22941の脆弱性を再現したモックシミュレーション です。モックサーバーは、公式のCVEおよびエクスプロイトリポジトリに記載されているとおり、Upload.aspxエンドポイントが認証なしでアクセス可能であり、LocalFile GUIDレスポンスを返すという、実際の脆弱性の挙動を再現します。 なぜモックなのか？ Citrix ShareFile Storage Zones Controllerは、プロプライエタリなエンタープライズソフトウェアです...

CVE-2023-24489-poc

CVE-2023-24489-poc bash を使用した CVE-2023-24489 の POC。 テストしたいターゲットを以下の形式で列挙した target.txt リストが必要です： https://example1.com https://example2.com https://example3.com ファイルは、bash スクリプトを実行するディレクトリと同じ場所に置く必要があります。 ご使用の際は十分に注意してください！ 参考： https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/...

CTX-CVE-2020-7473

CTX-CVE-2020-7473 Citrix Sharefile 脆弱性チェック 簡単な調査詳細 CTX-CVE-2020-7473 作成日: 2020.04.16 脆弱性チェック: Webブラウザで開く https://yoursharefileserver.companyname.com/UploadTest.aspx または curl https://yoursharefileserver.companyname.com/UploadTest.aspx --path-as-is 空白ページ = サーバー脆弱 エラー404 = サーバーはパッチ済み 注意事項:...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

Exploit for Improper Access Control in Citrix Sharefile_Storagezones_Controller

Vulnerability Details - CVE: CVE-2021-22941 - Severity...

EUVD-2014-1971

Malware in sbrugna...

EUVD-2021-10061

Malware in sbrugna...

EUVD-2019-16761

Malware in sbrugna...

EUVD-2018-8757

Malware in sbrugna...

EUVD-2020-29813

Malware in sbrugna...

EUVD-2021-10023

Malware in sbrugna...

EUVD-2019-16762

Malware in sbrugna...

EUVD-2018-8756

Malware in sbrugna...

CVE-2021-22891

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller...

CVE-2021-22941

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller...

CVE-2020-8982

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...

CVE-2020-8983

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

VulnCheck KEV: CVE-2020-8982

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix...

Citrix ShareFile StorageZones file upload

Added: 08/28/2023 Background ShareFile is a file sharing service. StorageZones are user-maintained storage for ShareFile data. Problem A vulnerability in ShareFile StorageZones Controller allows remote attackers to upload arbitrary files, leading to command execution. Resolution Upgrade to...