645 matches found
How do I fetch bindings for all NetScaler entities of a single entity type using a single NITRO AP
...
Race the Traffic Nitro - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Race the Traffic Nitro published at the 'play' market has multiple vulnerabilities...
Nitro Nation Stories - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Nitro Nation Stories published at the 'play' market has multiple vulnerabilities...
Nitro Nation Racing - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Nitro Nation Racing published at the 'play' market has multiple vulnerabilities...
Asphalt Nitro - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Asphalt Nitro published at the 'play' market has multiple vulnerabilities...
Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 - Heap Memory Corruption
Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1 Introduction 2 Report Timeline 3 Technical details 4 POC...
Nitro Pro 10.5.7.32 Nitro Reader 5.5.3.1 - Heap Memory Corruption
Nitro Pro 10.5.7.32 Nitro Reader 5.5.3.1 - Heap Memory Corruption Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1...
Nitro Pro 10.5.7.32 & Nitro Reader 5.5.3.1 - Heap Memory Corruption
Exploit for windows platform in category dos / poc Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1 Introduction 2...
Nitro Pro Handles BMP Image Memory Corruption Vulnerability
Nitro pro is a PDF production and management software. Nitro pro software has a memory corruption vulnerability in the handling of BMP images. Allowing an attacker to exploit this vulnerability by constructing malformed BMP images can cause the program to crash...
Citrix NetScaler Application Delivery Controller and NetScaler Gateway Information Disclosure Vulnerability (CNVD-2015-07703)
Citrix Systems NetScaler Service Delivery Appliance Service VM SVM, NetScaler Application Delivery Controller ADC, and NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition are Citrix Systems products. NetScaler Service Delivery Appliance SVM SVM, NetScaler Application Delivery...
CVE-2015-7997
Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...
CVE-2015-7997
Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...
Design/Logic Flaw
The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...
CVE-2015-7996
The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...
Citrix NetScaler Nitro API Cross-Site Scripting Vulnerability
Citrix NetScaler is a network traffic management product. A cross-site scripting vulnerability exists in the Citrix NetScaler Nitro API, which allows remote attackers to exploit the vulnerability to obtain sensitive information or hijack a user's session, due to the program using the wrong...
Citrix NetScaler Nitro API Cross-Site Request Forgery Vulnerability
Citrix NetScaler is a network traffic management product. A cross-site request forgery vulnerability exists in the Citrix NetScaler Nitro API, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions such a...
CVE-2015-2839
The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting XSS attacks via the filename JSON member in params/xenhotfix/0 to nitro/v1/config/xenhotfix...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the filename JSON member in...
Cross site scripting
The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting XSS attacks via the filename JSON member in params/xenhotfix/0 to nitro/v1/config/xenhotfix...