CVE-2018-11345

ASUSTOR AS6202T ADM 3.1.0.RFQ3 is affected by CVE-2018-11345: an unrestricted file upload vulnerability in upload.cgi that allows uploading data via the POST parameter filename and, due to path traversal in that parameter, placing files anywhere on the filesystem. This can enable attacker-control...

ASUSTOR AS6202T ADM Unrestricted File Upload Vulnerability

ASUSTOR AS6202T ADM is a dedicated operating system for ASUSTOR NAS storage devices from ASUSTOR. An arbitrary file upload vulnerability exists in the importuser.cgi file in ASUSTOR AS6202T ADM version 3.1.0.RFQ3, which stems from the program's failure to validate file extensions. An attacker can...

ASUSTOR ADM has multiple vulnerabilities

ASUSTOR Data Master ADM is an operating system exclusively on ASUSTOR NAS. ASUSTOR ADM suffers from a directory traversal vulnerability, an arbitrary file upload, and a stored XSS vulnerability that can be exploited by attackers to obtain sensitive information, upload files, and perform cross-sit...

GEO Mapping Issues on NetScaler MAS

GEO mapping issues on Citrix ADM...

How to Reset nsroot Password on NetScaler Console

Citrix ADM, formerly NetScaler Console This article describes how to reset nsroot password on NetScaler MAS. Note: For NetScaler Console Agents, you can replace the path with dev/da0s1a /flash 1. mount dev/da0s1a /flash 2. No /etc/passwd...

ADC Upgrade from ADM Fails Due to Insufficient Free Disk Space on ADC Node

The following symptoms are indicative of this issue: ADM command log status shows status as failed along with a message saying"Command failed Rebooting not found in command output" ADM log file /var/log/ns.log shows the message"Command failed Rebooting not found in command output" Dec 13 11:24:39...

Director showing error "Network unreachable. Check configuration, authentication, or service availability"

While connecting to Citrix ADMMAS from Director customer is getting error "Network unreachable. Check configuration, authentication, or service availability. " For configuring the Director with Citrix ADMMAS follow the...

Cambium Networks cnPilot Backdoor Access Elevation of Privilege Vulnerability

Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier. An attacker can exploit the vulnerability by accessing the web shell using the...

PT-2017-16427

Name of the Vulnerable Software and Affected Versions Cambium Networks cnPilot firmware versions 4.3.2-R4 and prior Description The issue concerns an undocumented, root-privilege administration web shell accessible via a specific HTTP path. This path is "https:///adm/syscmd.asp". Recommendations...

CVE-2017-14089

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues...

NetScaler 12.0 51.24 Shows Status of Connectivity Between NetScaler SNIP and AppFlow Collector

With the NetScaler Release 12.0 Build 51.24, NetScaler admin can view the status ofconnectivity between NetScaler's SNIP address and Appflow Collector by checking new information called State NetScaler's SNIP address is used to detect network reachability between NetScaler and AppFlow collector. ...

Automate backup of NetScaler appliance using Netscaler MAS

Citrix ADM, formerly NetScaler MAS Is it possible to automate the backup on the NetScaler, we have 20 in total and want to automate and save to a shared locations...

How to Reset NetScaler MAS to Default Configuration

Citrix ADM, formerly NetScaler MAS This article describes how to reset NetScaler MAS to default configuration...

sousalimaadvogados.com.br XSS vulnerability

Vulnerable URL: http://www.sousalimaadvogados.com.br/adm/lov.asp?Representante=1==form1=cdcliente=cliente=icarquivomorto%20=%20false=nmcliente=S=nmcliente10=cdcliente10=rep=1/-///'/"//--...

How to Attach Additional Disk to NetScaler MAS 12.0

Citrix ADM, formerly NetScaler MAS The article describes how to attach an additional disk to NetScaler MAS 12.0 and lower versions. Points to Note You can only add one additional disk to NetScaler MAS apart from the default 120 GB disk. Adding more than one additional disk is not supported. The...

How to Generate Tech support bundle for Citrix ADM from CLI

The articles describes how to generate the technical support bundle of Citrix ADM...

MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-04630)

MantisBT is an open-source issue management system developed in PHP and commonly used for internal collaboration within corporate teams. A cross-site scripting vulnerability exists in the admconfigreport.php page in MantisBT 1.2.16 and later versions, which can be exploited to inject arbitrary We...

How to reboot or shutdown NetScaler MAS using CLI

Citrix ADM, formerly NetScaler MAS There is an option on MAS GUI to reboot it but what is the equivalent CLI command for it. Do not use the REBOOT command as it is not a clean reboot and will need a Database recovery...

HDX Insight Diagnostics and Troubleshooting Guide

Citrix ADM, formerly NetScaler MAS Introduction Prerequisites for Configuring HDX Insight Troubleshooting Issues Related to ICA parsing Error Counter details Checklist before Contacting Citrix Technical Support Information to collect before Contacting Citrix Technical support Known Issues...

Security feature bypass

IBM Tivoli NetView Access Services NVAS allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product...