CitrixADC-CVE-2020-8300

Detectar configuración de acción SAML o perfil SAML iDP de Citrix ADC vulnerable a CVE-2020-8300 usando la API NITRO de Citrix ADC EJEMPLO & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" Si esto resulta útil para alguien, desarrollaré más...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan 此Metasploit-Framework模块可用于帮助公司检查最近的Citrix漏洞（2020年7月8日披露）。 CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Donny Maasland 于2020年7月8日公开报道，讨论了该漏洞如何被利用。 截至2020年7月10日，RIFT 已确认该漏洞可用于从易受攻击的实例中提取有效的VPN会话。 在Twitter上了解更多信息： Citrix 为影响多个产品的11个新漏洞发布关键补丁 黑客积极扫描并不断尝试利用 Citrix ADC 漏洞 请求 0x1...

EUVD-2021-10082

Malware in sbrugna...

EUVD-2015-2927

Malware in sbrugna...

EUVD-2015-2926

Malware in sbrugna...

EUVD-2021-10081

Malware in sbrugna...

EUVD-2015-7892

Malware in sbrugna...

[Netscaler] Nitro API: Intermittent Incomplete /nitro/v1/config/rnat Responses

You might observe less data than expected in the response from NetScaler when calling the Nitro API /nitro/v1/config/rnat under the following conditions: NetScaler versions before 13.1 Build 53.24 NetScaler versions before 14.1 Build 21.57 Simultaneous 'show' calls are made from different session...

Citrix NetScaler Automated backup job is failing after recent upgrade.

After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...

How To: Nitro API Authentication for RADIUS Access-Challenge Response

When NITRO API is used to manage or get information from a NetScaler, a session must be authenticated first. Depending on the authentication factors configured for NetScaler Management, different NITRO API resources should be used. If one of the authentication factors used, responds with a...

NITRO API commands not working, request times out.

NITRO API endpoint is not working, the requests sent to the NSIP timeout without a response...

CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22955

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

Design/Logic Flaw

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

Denial of service

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22955

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

Citrix NITRO API Settings

Binary data citrixapplicationdeliverysettings.nbin...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX330728)

The remote Citrix ADC or Citrix NetScaler Gateway device is version 11.1.x prior to 11.1-65.23, 12.1.x prior to 12.1-63.22, 12.1-FIPS prior to 12.1-55.257, 13.0.x prior to 13.0-83.27, or 13.1.x prior to 13.1-4.43. It is, therefore, affected by multiple vulnerabilities: - Unauthenticated denial of...

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADC,Citrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issues: CVE-ID|...