CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

mailorder

Mail Order The Nalpeiron Licensing Service NLSSRV32.exe is installed as part of certain software installations to handle privileged software licensing operations. It is paired with a client component filechck.dll which communicates with the service via mailslots hence the name. Calls are performe...

CVE-2026-119200

The Nuxt web development framework versions 4.6.0 through 4.6.2 are vulnerable to a path traversal issue where literal or percent-encoded dot segments (e.g., /%2e/admin) are resolved before page rendering. This allows attackers to bypass Nitro routing , server/middleware path checks, and server r...

CVE-2026-119199

The Nuxt web development framework (versions 3.0.0 through 4.6.3 ) contains a vulnerability where the development server can expose the Nitro 2 development bundle at /dev/index.mjs via Vite file serving when accessible over HTTP. The root cause is that Nitro inlines private runtimeConfig values r...

CVE-2026-119199 Nuxt dev server exposes private runtime config through the Nitro dev bundle

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at /dev/index.mjs through Vite file serving when the server is reachable over HTTP. Nitro inlines private runtimeConfig values resolved at bui...

EUVD-2026-113370

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at /dev/index.mjs through Vite file serving when the server is reachable over HTTP. Nitro inlines private runtimeConfig values resolved at bui...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

CVE-2025-55817

Vulnerability Type Cross Site Scripting XSS Affected Component The Connection Settings of the Nitro GraphQL by Chillicream, contain 3 different input locations vulnerable to Cross Site Scripting XSS. Vulnerable Parameters : SDL Schema Endpoint, Subscription Endpoint, SSE Subscription Endpoint...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

CVE-2026-98775

A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to cause a system crash, resulting in a Denial of Service DoS, ...

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

CVE-2025-45528: Undefined Security Weakness

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

PT-2026-122147

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

EUVD-2025-211197

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code by processing a crafted PDF file. This vulnerability is associated with CWE-94 (Improper Control of Generation of Code) . The documents do not provide specific details regarding the un...

EUVD-2026-107416

Nuxt: Server-side route rules redirect, headers, proxy, ssr are skipped for case-variant paths when routing is case-insensitive...

@abbele/core (>=0.0.1, <=0.0.10), @abbele/uikit (>=0.0.1, <=0.1.2) +358 more potentially affected by CVE-2026-114132 via @nuxt/nitro-server (>=3.20.0, <=3.21.11)

@nuxt/nitro-server NPM version =3.20.0, =0.0.1, =0.0.1, =1.2.3, =0.0.3, =0.2.9, =0.0.1, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =1.0.4, =1.0.4, =1.0.5 and more Source cves: CVE-2026-114132 Source advisory: GHSA-VJH5-4X84-XRQP...

@abbele/core (>=0.0.1, <=0.0.10), @abbele/uikit (>=0.0.1, <=0.1.2) +379 more potentially affected by CVE-2026-114132 via @nuxt/nitro-server (>=3.20.0, <=4.6.1)

@nuxt/nitro-server NPM version =3.20.0, =0.0.1, =0.0.1, =1.2.3, =0.0.3, =0.2.9, =0.0.1, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =1.0.4, =1.0.4, =1.0.5 and more Source cves: CVE-2026-114132 Source advisory: SNYK:JS-NUXTNITROSERVER-21431482...

@abbele/core (>=0.0.1, <=0.0.10), @abbele/uikit (>=0.0.1, <=0.1.2) +481 more potentially affected by CVE-2026-114132 via @nuxt/nitro-server (>=3.20.0, <=4.6.2)

@nuxt/nitro-server NPM version =3.20.0, =0.0.1, =0.0.1, =0.0.0, =1.2.3, =0.0.3, =0.2.9, =0.0.1, =0.0.1, =1.1.1, =1.0.0, =0.1.0, =0.1.1, =0.6.15 and more Source cves: CVE-2026-114132 Source advisory: OSV:GHSA-VJH5-4X84-XRQP...