citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan Questo modulo Metasploit-Framework può essere utilizzato per aiutare le aziende a verificare le ultime vulnerabilità Citrix rese note l'8 luglio 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Il report pubblico dell'8 luglio 2020 di Donny Maasland ha discusso come la...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC मल्टी-होस्ट, मल्टी-पोर्ट स्कैनर और ऑडिटर जो CVE-2025-6543 से प्रभावित NetScaler उपकरणों के लिए है। SNMP और SSH गणना का समर्थन करता है, वैकल्पिक CSV रिपोर्टिंग और एक्सप्लॉइट स्टब्स के साथ। 🔐 GitHub Repository Description CVE-2025-6543 एन्हांस्ड चेकर मल्टी-होस्ट,...

citrix-cve-2021-22941-lab

⚠️ Haftungsausschluss Dies ist eine Mock-Simulation der Schwachstelle CVE-2021-22941 zu Testzwecken. Der Mock-Server repliziert das tatsächliche verwundbare Verhalten, bei dem der Upload.aspx-Endpunkt ohne Authentifizierung zugänglich ist und LocalFile-GUID-Antworten zurückgibt, wie in den...

cve-2023-4966-iocs

Suche nach CVE-2023-4966 IoCs Skript: check-cve-2023-4966.py Das Skript durchsucht die Citrix NetScaler-Protokolle nach möglichen Ausnutzungen von CVE-2023-4966. Verwendung root@kitploit: usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for...

CVE-2019-19781-Citrix

لا يحتوي هذا المستودع على ملف README...

CVE-2020-13885

Exploit-Titel: Citrix Workspace app vor 1912 für Windows - Privilegienerweiterung 1 Datum: 2020-06-07 Autor: Andrew Hess Software-Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

CVE-2020-13884

Título do Exploit: Citrix Workspace app anterior à versão 1912 para Windows - Elevação de Privilégios 2 Data: 2020-06-07 Autor: Andrew Hess Link do Software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Boletim:...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Script per determinare se Citrix è vulnerabile al CVE-2025-6543 citrix-cve-2025-6543-check.py è uno script Python 3 da riga di comando che identifica le istanze NetScaler ADC / Gateway vulnerabili all'overflow di memoria CVE-2025-6543 pubblicato da Citrix a giugno 2025...

Citrix StoreFront Server - XML External Entity

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. id: CVE-2019-13608 info: name: Citrix StoreFront Server - XML External Entity author: daffainfo severity: high description: | Citrix StoreFront Server before 1903, 7.15 LTSR...

Citrix XenMobile Server - Local File Inclusion

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference: -...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the traceroute function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Citrix Gateway and Citrix ADC - Cross-Site Scripting

Citrix ADC and Citrix Gateway versions before 13.1 and 13.1-45.61, 13.0 and 13.0-90.11, 12.1 and 12.1-65.35 contain a cross-site scripting vulnerability due to improper input validation. id: CVE-2023-24488 info: name: Citrix Gateway and Citrix ADC - Cross-Site Scripting author: johnk3r,DhiyaneshD...