5469 matches found
Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors
The Dutch National Cyber Security Centre NCSC-NL has warned of cyber attacks exploiting a recently disclosed critical security flaw impacting Citrix NetScaler ADC products to breach organizations in the country. The NCSC-NL said it discovered the exploitation of CVE-2025-6543 targeting several...
📄 Citrix NetScaler ADC/Gateway 14.1 Memory Disclosure
Citrix NetScaler ADC/Gateway version 14.1 CitrixBleed memory disclosure exploit that achieves an out-of-bounds read. Exploit Title: Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure Exploit Author: Yesith Alvarez Vendor Homepage:...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 – Citrix NetScaler Memory Leak Updated PoC Th...
Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
Exploit Title: Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure Exploit Author: Yesith Alvarez Vendor Homepage: hhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 CVE: CVE-2025-5777 Link: https://github.com/yealvarez/CVE/blob/main/CVE-2025-5777/exploit.py impor...
CitrixBleed 2 Mass Scanner
This script is a mass scanner for the CitrixBleed 2 vulnerability...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool...
PT-2025-32130
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when handling client exceptions, potentially allowing unauthorized channel access. Recommendations At the moment, there is no information about a newer version that...
The vulnerability of the control interface of the Citrix NetScaler Application Delivery Controller (formerly Citrix ADC) and the access control system for the virtual environment, Citrix NetScaler Gateway (formerly Citrix Gateway), allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the control plane of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the access control system for the virtual environment, Citrix NetScaler Gateway previously Citrix Gateway, is related to incorrect input of configuration data. Exploiting this...
VulnCheck KEV: CVE-2020-8194
Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download...
The vulnerability of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller) and the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.
The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway virtual environment access control system formerly Citrix NetScaler Gateway is related to an operation that goes beyond the buffer in memory...
VulnCheck KEV: CVE-2023-6184
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CitrixBleed 2 CVE-2025-5777: The New Heartbleed for NetScale...
CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)
Overview During a Virtual Desktop Infrastructure VDI breakout assessment, Rapid7 identified a Local Privilege Escalation LPE vulnerability affecting Citrix Virtual Apps and Desktops. This issue was assigned CVE-2025-6759 and has a CVSS score of 7.3 High. Rapid7 observed a SYSTEM process handle wi...
CVE-2025-5777 Exposes Citrix NetScaler to Dangerous Memory Leak Attacks
The cybersecurity community is once again sounding the alarm over a new vulnerability in Citrix NetScaler devices- this time, it’s CVE-2025-5777 , also dubbed CitrixBleed 2. Following in the footsteps of the high-profile CitrixBleed vulnerability CVE-2023-4966 disclosed in 2023, this newly...
CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities KEV catalog, officially confirming the vulnerability has been weaponized in the wild. The shortcoming in...
Citrix Virtual Apps and Desktops Privilege Escalation (CTX694820)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2503, or prior to 2402 LTSR CU1 Update 1, or prior to 2402 LTSR CU2 Update 2. It is, therefore, affected by a privilege escalation vulnerability. By exploiting this vulnerability, a local,...
Citrix XenServer DOS (XSA-470)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a DoS vulnerability where An unprivileged guest can cause a hypervisor crash, causing a Denial of Service DoS of the entire host. Note that Nessus has not tested for this issue but has...
CVE-2025-6759
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 - Citrix NetScaler Memory Leak PoC 📌 Descrip...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-5777link is external Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability These types of vulnerabilities are frequent attack vectors for malicio...