CVE-2025-12101-checker

CVE-2025-12101-checker Citrix NetScaler ADC / Gateway 인스턴스에서 CVE-2025-12101 /cgi/logout에서 반사 XSS를 확인하기 위한 간단한 Python PoC입니다. 조작된 SAMLResponse + RelayState 페이로드를 사용합니다. ⚠️ 이 도구는 귀하가 소유하거나 명시적으로 테스트 승인을 받은 시스템에서만 사용하십시오. 🔍 Background CVE-2025-12101은 NetScaler ADC 및 NetScaler Gateway가 Gateway 또는 AAA...

CVE-2023-4966-POC

CVE-2023-4966-POC NetScaler CVE-2023-4966 脆弱性の概念実証 説明 このPythonスクリプトは、Citrix ADCインスタンスの重大な脆弱性であるCVE-2023-4966を悪用し、認証されていない攻撃者がセッショントークンを漏洩することを可能にします。この脆弱性にはCVSSスコア9.4が割り当てられ、ユーザーの操作なしにリモートから悪用可能です。Gateway（VPN仮想サーバー、ICAプロキシ、CVPN、RDPプロキシ）またはAAA仮想サーバーとして構成されたCitrix NetScalerアプライアンスがこの攻撃に対して脆弱です。 使用方...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed an warning in ipvsappnetcleanup. During the initialization of ipvsappnetinit, if the file ipvsapp cannot be created, the initialization will still succeed by default. Therefore, the ipvsapp file will not be found duri...

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway SSL VPN, ICA Proxy, CVPN, or RDP Proxy, an unauthenticated remote threat actor may ...

UBUNTU-CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-74747

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-67198 Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with ...

EUVD-2026-52692

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...

CVE-2026-67195 Perspective 5.0.0 RCE via eval() Expression Injection

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...

CVE-2026-67195 Perspective 5.0.0 RCE via eval() Expression Injection

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...

CVE-2024-51313

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub42EA38 function of the file /goform/SetVirtualServerCfg...

CVE-2024-51313

The Tenda TX9 router running firmware version V22.03.02.20 is susceptible to a stack overflow vulnerability. The flaw is located within the sub_42EA38 function of the /goform/SetVirtualServerCfg file. Exploitation of this vulnerability could lead to significant technical impact, including potenti...

CVE-2024-51313

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub42EA38 function of the file /goform/SetVirtualServerCfg...

CVE-2024-51313

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub42EA38 function of the file /goform/SetVirtualServerCfg...

PT-2026-61712

Name of the Vulnerable Software and Affected Versions Tenda TX9 version V22.03.02.20 Description A stack overflow occurs in the sub 42EA38 function within the /goform/SetVirtualServerCfg file. A stack overflow is a condition where a program writes more data to a stack-allocated buffer than it can...

CVE-2026-59762

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote,...

EUVD-2026-44679

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote,...

CVE-2026-59762

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote,...

CVE-2026-10817

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...

CVE-2026-13474 Denial of service via malformed HTTP/2 requests

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...