Code injection

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users vi...

CVE-2014-8580

CVE-2014-8580 affects Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The connected vendor advisory CTX200254 documents an authentication flaw in certain configurations that could allow an authenticated user to obtain unauthorized access to network resources belongin...

CVE-2014-8580

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users vi...

PT-2014-8628 · Citrix · Citrix Netscaler Application Delivery Controller +1

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Application Delivery Controller and NetScaler Gateway versions 10.5.50.10 through 10.5-52.10 Citrix NetScaler Application Delivery Controller and NetScaler Gateway versions 10.1.122.17 through 10.1-129.10 Citrix NetScaler...

Citrix NetScaler Unspecified Remote Code Execution (CTX200206)

The remote Citrix NetScaler device is affected by an unspecified remote code execution vulnerability in the management interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid78893; scriptversion"1.7";...

Citrix NetScaler SOAP Handler Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Citrix NetScaler SOAP Handler Remote Code Execution", 'Description' = %q This module exploits a memory corruption vulnerability on t...

Citrix Netscaler SOAP Handler - Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Citrix NetScaler SOAP Handler Remote Code Execution", 'Description' = %q This module exploits a memory corruption vulnerability on t...

Citrix NetScaler SOAP Handler Remote Code Execution Exploit

This Metasploit module exploits a memory corruption vulnerability on the Citrix NetScaler Appliance. The vulnerability exists in the SOAP handler, accessible through the web interface. A malicious SOAP requests can force the handler to connect to a malicious NetScaler config server. This maliciou...

CVE-2014-8495

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache...

Design/Logic Flaw

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache...

CVE-2014-8495

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache...

CVE-2014-8495

Citrix XenMobile MDX Toolkit prior to 9.0.4, when used to wrap iOS 8 apps, stores cached data insecurely due to improper encryption. This allows context‑dependent attackers to read sensitive information from the cache. Remediation: upgrade to version 9.0.4 or later.

CVE-2014-7140

Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...

Immunity Canvas: CITRIX_NETSCALER_SOAP

Name| citrixnetscalersoap ---|--- CVE| CVE-2014-7140 Exploit Pack| CANVAS Description| Citrix Netscaler 10.1 Soap exploit Notes| FoundBy: Console Cowboys Notes: A vulnerability exists in the SOAP handler of the web interface. A SOAP request can be crafted to trigger a memory corruption flaw,...

Code injection

Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-7140

CVE-2014-7140 affects Citrix NetScaler ADC/Gateway 10.x (before 10.1-129.11 and 10.5 before 10.5-50.10). The vulnerability is an unspecified remote code execution via the management interface, with a CVSSv2 base score of 7.5 (HIGH). The root cause and exact exploit vectors are not detailed in the...

CVE-2014-7140

Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw

Description of Problem The recently disclosed protocol flaw in SSLv3, referred to as CVE-2014-3566 or POODLE, could expose some deployments that support SSLv3 to a risk of an active Man in the Middle MITM attack. A successful attack could lead to the disclosure of the information that is being se...

Citrix NetScaler SOAP Handler Remote Code Execution

This module exploits a memory corruption vulnerability on the Citrix NetScaler Appliance. The vulnerability exists in the SOAP handler, accessible through the web interface. A malicious SOAP requests can force the handler to connect to a malicious NetScaler config server. This malicious config...

CVE-2011-2593

Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...