citrix-2025

Citrix NetScaler 设备检测脚本 作者：NCSC-NL !WARNING 其中一些检查旨在搜寻入侵迹象，而另一些检查则用于验证您是否已被入侵。 免责声明 这些脚本不保证其有效性。 这些脚本的检测能力基于有限的检测规则集。 请务必遵循供应商的说明以及安全公告中列出的漏洞相关信息。 在分享这些脚本的输出时，请确保不会泄露任何敏感信息。 联系方式 如需解读这些扫描脚本的输出，请将此信息转发 至您所在国家的网络安全机构（国家 CSIRT 或其他相关机构）。 概述 此存储库包含 3 组脚本，每个脚本都有自己的文件夹，内含针对该脚本的使用说明。 1...

CVE-2026-69774

creationtimestamp| type| source ---|---|--- 2026-09-08 20:20:09+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-09 04:00:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-10 01:00:35+00:00| seen|...

CVE-2026-78510

creationtimestamp| type| source ---|---|--- 2026-09-08 20:13:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztjnfwet2g 2026-09-08 20:19:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0352 2026-09-08 22:01:25+00:00| seen|...

CVE-2026-73009

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzti4uuzd2t 2026-09-08 20:19:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:02+00:00| seen|...

CVE-2026-69356

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztbd2nig24 2026-09-08 20:15:39+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349 2026-09-08 22:02:22+00:00| seen|...

CVE-2025-55683

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2023-41927

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses...

CVE-2023-41927

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses...

CVE-2023-41927

Kiloview P1/P2 devices are affected by CVE-2023-41927 due to supporting at least one cipher suite on NCSC-NL’s list of soon-to-be-obsolete suites, enabling potential cryptographic weaknesses. The issue is documented across multiple sources (NTSC advisory, Red Hat/NVD references, and PT Security l...

CVE-2023-41927 Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses...

Spring Framework insecurely handles PropertyDescriptor objects with data binding

Overview The Spring Framework insecurely handles PropertyDescriptor objects, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Spring Framework is a Java framework that can be used to create applications such as web applications...

Self-encrypting hard drives do not adequately protect data

Overview There are multiple vulnerabilities in implementations of ATA Security or TCG Opal Standards in Self-Encrypting Disks SEDs, which can allow an attacker to decrypt contents of an encrypted drive. Description CVE-2018-12037 There is no cryptographic relation between the password provided by...