280 matches found
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
CVE-2025-12101-checker
CVE-2025-12101-checker Citrix NetScaler ADC / Gateway 인스턴스에서 CVE-2025-12101 /cgi/logout에서 반사 XSS를 확인하기 위한 간단한 Python PoC입니다. 조작된 SAMLResponse + RelayState 페이로드를 사용합니다. ⚠️ 이 도구는 귀하가 소유하거나 명시적으로 테스트 승인을 받은 시스템에서만 사용하십시오. 🔍 Background CVE-2025-12101은 NetScaler ADC 및 NetScaler Gateway가 Gateway 또는 AAA...
CVE-2023-4966-POC
CVE-2023-4966-POC NetScaler CVE-2023-4966 취약점에 대한 개념 증명 설명 이 Python 스크립트는 CVE-2023-4966을 악용합니다. 이는 Citrix ADC 인스턴스의 치명적인 취약점으로, 인증되지 않은 공격자가 세션 토큰을 유출할 수 있게 합니다. 이 취약점은 CVSS 점수 9.4를 부여받았으며, 사용자 상호작용 없이 원격으로 악용할 수 있습니다. GatewayVPN 가상 서버, ICA Proxy, CVPN, RDP Proxy 또는 AAA 가상 서버로 구성된 Citrix NetScale...
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Citrix NetScaler CVE-2026-8452용 탐지 아티팩트 생성기 기술적 세부 사항은 블로그 게시물을 참조하세요. 탐지 실행 화면 python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // ||...
CVE-2026-73461
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...
CVE-2026-73461 Security Advisory 0163
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...
CVE-2026-73461 Security Advisory 0163
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...
CVE-2026-73461
CVE-2026-73461 is an incorrect privilege assignment (CWE-266) in Arista EOS affecting platforms with AAA-based gRPC authorization enabled for OpenConfig. An authenticated user's gRPC request may be processed at the wrong privilege level , causing authorization to use an incorrect AAA method list ...
EUVD-2026-80251
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway SSL VPN, ICA Proxy, CVPN, or RDP Proxy, an unauthenticated remote threat actor may ...
Security Advisory 0163
Security Advisory 0163 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73461 CVSSv3.1 Base Score: 8.0...
[SECURITY] Fedora 44 Update: lemonldap-ng-2.23.2-1.fc44
LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...
CVE-2026-8452: Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...
EUVD-2026-23534
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
CVE-2026-40527
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
CVE-2026-40527: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
CVE-2026-4368
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server leading to User Session Mixup...
CVE-2026-4368
CVE-2026-4368 affects Citrix NetScaler ADC and NetScaler Gateway (14.1-66.54) with a race condition that can cause user session mixups when configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA vserver. The issue’s base score is 7.7 ( HIGH ) per CVSS v4.0. Remediation: upgrade t...
CVE-2026-4368: Concurrent Execution using Shared Resource with Improper Synchronization
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server leading to User Session Mixup...