42 matches found
citrix_adc_netscaler_lfi
citrixadcnetscalerlfiscan !texto alternativocitrix Este módulo de Metasploit-Framework se puede utilizar para ayudar a las empresas a comprobar las últimas vulnerabilidades de Citrix divulgadas el 08 de julio de 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 El informe público del 8 de julio de...
CitrixADC-CVE-2020-8300
使用 Citrix ADC NITRO API 检测存在 CVE-2020-8300 漏洞的 Citrix ADC SAML 操作或 SAML iDP 配置文件 示例 & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" 如果这个工具对大家有用，我将进一步开发以下功能： 识别 SAML 操作和 SAML iDP 配置文件的绑定关系，以确认它们是否被使用以及在哪里使用 通过检查 relaystaterule 和 acsurlrule...
EUVD-2021-10082
Malware in sbrugna...
EUVD-2015-2927
Malware in sbrugna...
EUVD-2021-10081
Malware in sbrugna...
EUVD-2015-2926
Malware in sbrugna...
EUVD-2015-7892
Malware in sbrugna...
[Netscaler] Nitro API: Intermittent Incomplete /nitro/v1/config/rnat Responses
You might observe less data than expected in the response from NetScaler when calling the Nitro API /nitro/v1/config/rnat under the following conditions: NetScaler versions before 13.1 Build 53.24 NetScaler versions before 14.1 Build 21.57 Simultaneous 'show' calls are made from different session...
Citrix NetScaler Automated backup job is failing after recent upgrade.
After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...
How To: Nitro API Authentication for RADIUS Access-Challenge Response
When NITRO API is used to manage or get information from a NetScaler, a session must be authenticated first. Depending on the authentication factors configured for NetScaler Management, different NITRO API resources should be used. If one of the authentication factors used, responds with a...
NITRO API commands not working, request times out.
NITRO API endpoint is not working, the requests sent to the NSIP timeout without a response...
CVE-2021-22955
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
Design/Logic Flaw
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
Denial of service
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22955
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956: Uncontrolled Resource Consumption
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22955: Uncontrolled Resource Consumption
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
