374 matches found
NetScaler ADC and NetScaler Gateway XSS (CTX695486)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 14.1 prior to 14.1-56.73, 13.1 prior to 13.1-60.32, 13.1-FIPS prior to 13.1-37.250-FIPS, or 12.1-FIPS prior to 12.1-55.333-FIPS. It is, therefore, affected by a cross-site scripting...
Malicious code in poglymer-ogih-aaa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f1126347415a9c3addaf2c053c0f0c943f4cafdf6259341b11bd9397d25e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138948
Malicious code in poglymer-ogih-aaa npm...
CVE-2025-12101
Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...
EUVD-2025-84344
Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...
CVE-2025-12101 Cross-Site Scripting (XSS)
Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...
CVE-2025-12101
The CVE-2025-12101 XSS exists in NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA virtual server. The root cause is improper neutralization of input in the application’s RelayState handling, enabling arbitrary scripts to run in user views (CSRF potential noted by some sourc...
CVE-2025-12101: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...
CVE-2025-60803: Improper Neutralization of Special Elements used in an OS Command
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
PT-2025-54899
This update for aaa base fixes the following issues: Update to version 84.87+git20240906.742565b: yama-enable-ptrace: enforce changed behavior upon installation bsc1221763 Avoid unnecessary /bin/bash dependency sysctl: Fixup of not setting kernel.pid max on 32b archs bsc1227117 Update to version...
EUVD-2015-1965
Malware in sbrugna...
EUVD-2015-0734
Malware in sbrugna...
EUVD-2021-15176
Malware in sbrugna...
EUVD-2007-4614
Malware in sbrugna...
EUVD-2012-4584
Malware in sbrugna...
EUVD-2016-7316
Malware in sbrugna...
EUVD-2021-15177
Malware in sbrugna...
EUVD-2021-18276
Malware in sbrugna...