CVE-2023-2509 A Cross-Site Scripting(XSS) vulnerability was found on ADM

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

CVE-2023-2509 A Cross-Site Scripting(XSS) vulnerability was found on ADM

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

CVE-2023-2509

CVE-2023-2509 is an XSS vulnerability affecting ASUSTOR ADM products (ADM 4.0.6.REG2, 4.1.0 and below; ADM 4.2.1.RGE2 and below) as well as LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below. The root cause is a cross-site scripting flaw that could allow an attacker to inject mal...

CVE-2023-2509: Improper Neutralization of Input During Web Page Generation

A Cross-Site ScriptingXSS vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application...

PT-2023-19921

Name of the Vulnerable Software and Affected Versions ADM versions 4.0.6.REG2 through 4.1.0 ADM versions 4.2.1.RGE2 and below LooksGood versions 2.0.0.R129 and below SoundsGood versions 2.3.0.r1027 and below Description A Cross-Site ScriptingXSS issue was found in the ADM, LooksGood, and SoundsGo...

ADM GUI is down and users only have access via SSH

Users are unable to get any access to ADM GUI on 13.1...

All ADC using pooled license entered grace period

All Netscaler Instances using Pooled License via ADM agent entered grace period...

CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

PT-2023-19786 · Vinga · Vinga Wr-Ac1200

Name of the Vulnerable Software and Affected Versions: Vinga WR-AC1200 versions 81.102.1.4370 and before Description: A password vulnerability allows a remote attacker to execute arbitrary code via the password parameter at the "/goform/sysTools" and "/adm/systools.asp" endpoints. This issue has...

CVE-2023-24796: Undefined Security Weakness

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

CVE-2023-30770 A stack-based buffer overflow vulnerability was found in the ADM

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below...

CVE-2023-30770: Out-of-bounds Write

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below...

ADC - 13.1 - unable to update licenses from SDX to ADM

When licensing the SDX through ADM it throws the error "Connection to License server failed"...

ADM Service not showing Host ID

When customer goes into ADM Service portal and navigates to Pooled Licensing section, the Host ID is not populated and shows a blank value...

ADM Service: How to identify which VIPs belong to which NetScaler

To quickly identify within ADM / ADM Service in which NetScalers a specific VIP LB/CS/GW,etc. may be configured...

How to migrate an existing ADM instance to a newly deployed ADM server.

To demonstrate how to migrate an existing ADM instance to a newly deployed ADM server...

[ADC] ICA sessions are NOT sent to ADM with "Skip Code [169]"

You may observe some ICA sessions are displayed in GUI Configuration Citrix Gateway ICA Connections, but not in ADM HDX Insight. NetScaler ADC ns.log displays the following error: ICARECORD: Skipping ICA flow: ...... Skip Code 169...

K64709522: Multiple Zip Slip vulnerabilities

Security Advisory Description CVE-2018-1002200 plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

SUSE CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...