Path traversal

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32655

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32655

CVE-2023-32655 concerns a path traversal in the USB Type-C power delivery controller installation software for Intel NUC Kits & Mini PCs (NUC8i7HVK, NUC8HNK). Root cause: path traversal in the installer could allow an authenticated local user to escalate privileges. Affected versions: Intel NUC8i...

CVE-2023-32655: DEPRECATED: Often Misused: Path Manipulation

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

How to move a file from one Netscaler to another via CLI using SCP.

Understand how to utilize the SCP command to move a file from one ADC to another via CLI...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2023-4966 An Exploitation script developed to exploit the...

Error: "There are no apps or desktops available for you at this time" after logon StoreFront

Multiple zones are configured within a single site. Primary zone and Satellite zone both contain one Delivery Controller and one Storefront for redundancy. If the Delivery Controller in Satellite zone fails, the whole environment is still working well. But if the Delivery Controller in Primary zo...

Virtual apps and desktops - 1912/2203 -Citrix Infrastructure / OS upgrade

Query on upgrading the OS Citrix servers Storefront, DDC and License server...

ConfigSync Failure May Be Seen When Delivering App-V, MSIX, or MSIX App Attach Packages

For customers using Delivery Controller Version 2308 and delivering App-V, MSIX or MSIX app attach packages through Citrix, errors with the source “Citrix ConfigSync Service” and the Event ID “505” may be logged to the Windows Event Viewer on Delivery Controllers with the following message: “The...

NetScaler AAA sessions' explanation under "Reporting>Citrix Gateway>AAA>AAA sessions"

This guide provides an explanation of the "AAA sessions" section within the ADC Application Delivery Controller reporting, specifically under "Citrix Gateway."...

Enabling a feature on ADC

To enable any feature on ADC...

Delivery Controller showing offline in Citrix Director

Newly added delivery controller shows as offline in Citrix Director...

Delivery Controller fails to connect to local SQL Express database

Migrating databases for existing site from a full SQL server to a SQL Express instance running in the same VM as one of the Delivery Controllers causes the controller hosting the SQL Express not to be able to connect to the database, even after the correct machine account permissions and login...

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

CVE-2023-3519 identify NetScaler...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to insecure management of privileges. Exploiting this...

PT-2023-3576 · Citrix · Citrix Netscaler Application Delivery Controller +2

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Application Delivery Controller versions prior to 12.1-55.297 Citrix NetScaler Application Delivery Controller versions prior to 13.0-91.13 Citrix NetScaler Application Delivery Controller versions prior to 13.1-37.159 Citrix...

How to Query License Usage Through PowerShell command in DDC​

Admin needs to leverage PowerShell to get the usage of Citrix license in DDC...

Fortinet FortiADC Command Injection Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC suffers from a command injection vulnerability, which stems from an improper neutralization of special elements used in os commands, that can be exploited by an attacker to execute arbitrary shell code a...

EdgeNexus ADC 跨站请求伪造漏洞

EdgeNexus ADC is a powerful and easy-to-use load balancer from EdgeNexus. A security vulnerability exists in EdgeNexus ADC version 4.2.8 that stems from the presence of cross-site request forgery CSRF, which allows an attacker to elevate privileges and execute arbitrary code via unspecified vecto...

The vulnerability of the FortiADC application delivery controller web interface allows a hacker to execute arbitrary commands.

The vulnerability of the FortiADC application delivery controller web interface exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary commands by...