Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign

Researchers warn that APT41, a notorious China-linked threat group, has targeted more than 75 organizations worldwide in “one of the broadest campaigns by a Chinese cyber-espionage actor observed in recent years.” Between Jan. 20 and March 11, researchers observed APT41 exploiting vulnerabilities...

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center Cross-Site Scripting Vulnerability

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center are both products of Citrix Systems, Inc. SD-WAN Center is a centralized management system. SD-WAN Center is a centralized management system that configures, monitors, and analyzes all Citrix SD-WAN devices on the WAN.NetScaler SD-WAN Cente...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

Cross site scripting

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center and NetScaler SD-WAN Center are affected by CVE-2019-11345, an XSS vulnerability in the management console. Affected versions are Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7. The root cause is a cross-site scripting flaw that cou...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

TLS handshake fails with any TLS LB VIP FIPS 9700 - Reset code 9811 from ADC

Cannot reach Netscaler Gateway Page FIPS Not able to form any TLS handshake with any LB VIP on ADC ADC sends REST with code :: 9811 Transmission Control Protocol, Src Port: 443, Dst Port: 62706, Seq: 4271, Ack: 860, Len: 0 Source Port: 443 Destination Port: 62706 Stream index: 0 TCP Segment Len: ...

CVE-2019-11345: Improper Neutralization of Input During Web Page Generation

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

PT-2020-9190

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN Center versions 10.2.x through 10.2.0 NetScaler SD-WAN Center versions 10.0.x through 10.0.6 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker injects malicious code into a...

EulerOS 2.0 SP5 : wireshark (EulerOS-SA-2020-1139)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

Binary data 701262.prm...

404 Exploit Not Found: Vigilante Deploying Mitigation for Citrix NetScaler Vulnerability While Maintaining Backdoor

As noted in Rough Patch: I Promise It'll Be 200 OK, our FireEye Mandiant Incident Response team has been hard at work responding to intrusions stemming from the exploitation of CVE-2019-19781. After analyzing dozens of successful exploitation attempts against Citrix ADCs that did not have the...

Types of NetScaler and NetScaler Gateway Licenses

This article describes the types of licenses available for NetScaler and NetScaler Gateway appliances. NetScaler licenses are assigned to physical MPX and virtual VPX appliances. Logical SDX appliances require licenses for each physical appliance and each virtual instance. Refer to NetScaler...

Citrix ADC (NetScaler) Directory Traversal / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal in Citrix Application Delivery...

PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability

It's now or never to prevent your enterprise servers running vulnerable versions of Citrix application delivery, load balancing, and Gateway solutions from getting hacked by remote attackers. Why the urgency? Earlier today, multiple groups publicly released weaponized proof-of-concept exploit cod...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027) (Direct Check)

Binary data citrixsslvpnCVE-2019-19781.nbin...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...

Citrix and NetScaler SD-WAN Center Unauthenticated Directory Traversal File Write

The remote Citrix SD-WAN Center or NetScaler SD-WAN Center is susceptible to directory traversal and file writes in arbitrary locations. This is due to improper sanitization of user-supplied input in the applianceSettingsFileTransfer action of ApplianceSettingsController. An unauthenticated, remo...

Citrix ADC (NetScaler) Directory Traversal Scanner

This module exploits a directory traversal vulnerability CVE-2019-19781 within Citrix ADC NetScaler. It requests the smb.conf file located in the /vpns/cfg directory by issuing the request /vpn/../vpns/cfg/smb.conf. It then checks if the server is vulnerable by looking for the presence of a...