Citrix_Secure_Access_LPE_0DAY

Citric Secure Access ローカル権限昇格 Citrix Secure Access Windows Client にローカル権限昇格の脆弱性を発見しました。この脆弱性により、特権管理者が悪意のあるペイロードを注入して、NT Authority 権限を取得することが可能になります。 影響を受ける Citrix Secure Access のバージョンは 23.1.1.11 以降です。 参考までに、概念実証（PoC）を以下に示します。...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN の特権昇格 Ivanti Secure Access（旧 Pulse Secure）の特権昇格 Cobalt Strike BOF（CVE-2023-35080）。 エクスプロイト作成: Alex、BOF 作成: Tijme。実現に協力: Northwave Cyber Security 説明 これは、Cobalt Strike（CS）Beacon Object File（BOF）と実行ファイルであり、Ivanti Secure Access（旧 Pulse Secure）VPN...

CVE-2026-97715

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

CVE-2026-97716

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

CVE-2026-97717

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-97714

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...

CVE-2026-97717 Denial of Service in Absolute Secure Access

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-97717

CVE-2026-97717 is a vulnerability in the proxy sub-system of Absolute Secure Access servers running versions prior to 14.60 . An authenticated attacker can exploit this flaw by sending malformed data to the server, resulting in a persistent denial of service . No specific exploit information or r...

EUVD-2026-94576

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-97717 Denial of Service in Absolute Secure Access

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-97716 Denial of Service in Absolute Secure Access

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

CVE-2026-97716

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Absolute Secure Access servers prior to version 14.60 . An unauthenticated attacker can trigger a persistent denial of service by sending specially crafted traffic to the server. No exploit information or specific remediatio...

CVE-2026-97716 Denial of Service in Absolute Secure Access

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

EUVD-2026-94577

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

CVE-2026-97715

A vulnerability exists in the client registration process of Secure Access servers prior to version 14.60 . Authenticated attackers can exploit this by passing malformed data to the server, resulting in a persistent denial of service . No specific exploit details or remediation steps are provided...

EUVD-2026-94580

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

CVE-2026-97715 Denial of Service in Absolute Secure Access

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

CVE-2026-97715 Denial of Service in Absolute Secure Access

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

CVE-2026-97714 Denial of service vulnerability in Secure Access

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...

EUVD-2026-94583

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...