PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability

It's now or never to prevent your enterprise servers running vulnerable versions of Citrix application delivery, load balancing, and Gateway solutions from getting hacked by remote attackers. Why the urgency? Earlier today, multiple groups publicly released weaponized proof-of-concept exploit cod...

Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution

!/usr/bin/python3 Exploits the Citrix Directory Traversal Bug: CVE-2019-19781 You only need a listener like netcat to catch the shell. Shout out to the team: Rob Simon, Justin Elze, Logan Sampson, Geoff Walton, Christopher Paschen, Kevin Haubris, Scott White Tool Written by: Rob Simon and David...

Threat spotlight: Phobos ransomware lives up to its name

Ransomware has struck dead on organizations since it became a mainstream tool in cybercriminals' belts years ago. From massive WannaCry outbreaks in 2017 to industry-focused attacks by Ryuk in 2019, ransomware's got its hooks in global businesses and shows no signs of stopping. That includes a...

Debian DSA-4600-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltration or cross-site scripting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Vulmap

This is a Python script for a local vulnerability scanner, specifically designed for Linux systems. The script, named Vulmap, is part of the Vulmap Local Vulnerability Scanners project. It scans the host for installed packages, queries the Vulmon API for vulnerabilities, and prints the results,...

rConfig <= 3.9.6 Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mozilla Patches Critical Vulnerability

Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The Cybersecurity and Infrastructure Security...

Google Chrome < 79.0.3945.117 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 79.0.3945.117. It is, therefore, affected by a vulnerability as referenced in the 202001stable-channel-update-for-desktop advisory. - Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attack...

Google Chrome < 79.0.3945.117 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.117. It is, therefore, affected by a vulnerability as referenced in the 202001stable-channel-update-for-desktop advisory. - Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote...

exploitdb-bin-sploits

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is intended to serve as the...

Photon OS 2.0: Tar PHSA-2019-2.0-0187

An update of the tar package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132546;...

Photon OS 2.0: Linux PHSA-2019-2.0-0191

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0191. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132536...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...

Exploit for CVE-2013-0422

K8tools 20191130 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 扫描工具 Ladon 5.7 大型内网渗透扫描神器内置40个功能,支持Cobalt Strike + 扫描工具 K8Cscan5.4 大型内网渗透扫描器内置30个功能,支持Cobalt Strike +...

Vxscan

This is a Python script called Vxscan, which is a comprehensive scanning tool. It is written in Python 3.6 or later and is designed to perform various scanning tasks, including sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system...

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party ....

Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2015-8704 and CVE-2015-8705).

Summary ISC BIND is vulnerable to several security vulnerabilities. Vulnerability Details CVEID: CVE-2015-8704 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticat...

CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance

Description of Problem A vulnerability has been identified in Citrix Application Delivery Controller ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway that, if exploited, could allow an unauthenticated attacker to perform arbitrary code execution. The scop...

Google Chrome < 79.0.3945.88 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.88. It is, therefore, affected by a vulnerability as referenced in the 201912stable-channel-update-for-desktop17 advisory. - Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remo...

Google Chrome < 79.0.3945.88 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 79.0.3945.88. It is, therefore, affected by a vulnerability as referenced in the 201912stable-channel-update-for-desktop17 advisory. - Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote...