CVE-2023-24489-ShareFile

ShareFile RCE CVE-2023-24489 यह एक Python स्क्रिप्ट है जो ShareFile एप्लिकेशन CVE-2023-24489 में एक रिमोट कोड निष्पादन कमजोरी का शोषण करती है। यह कमजोरी हमलावर को लक्ष्य सिस्टम पर मनमाने कमांड निष्पादित करने की अनुमति देती है। उपयोग स्क्रिप्ट का उपयोग करने के लिए, नीचे दिए गए निर्देशों का पालन...

CVE-2023-24489-poc

CVE-2023-24489-poc POC لـ CVE-2023-24489 باستخدام bash. يتطلب قائمة target.txt مليئة بالأهداف التي تريد اختبارها بالتنسيق التالي: https://example1.com https://example2.com https://example3.com يجب أن يكون الملف في نفس المجلد الذي يُنفَّذ فيه سكربت bash. يرجى استخدامه بحذر ! المرجع:...

CVE-2021-22941

Utilisation python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Référence https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

citrix-cve-2021-22941-lab

⚠️ अस्वीकरण यह परीक्षण उद्देश्यों के लिए CVE-2021-22941 भेद्यता का मॉक सिमुलेशन है। मॉक सर्वर वास्तविक संवेदनशील व्यवहार को दोहराता है जहाँ Upload.aspx एंडपॉइंट बिना प्रमाणीकरण के सुलभ होता है और LocalFile GUID प्रतिक्रियाएँ लौटाता है, जैसा कि आधिकारिक CVE और शोषण-रेपॉजिटरीज़ में प्रलेखित है। मॉक...

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile प्रमाणीकरण बायपास Progress ShareFile प्रमाणीकरण बायपास डिटेक्शन आर्टिफैक्ट जनरेटर टूल विवरण यह डिटेक्शन आर्टिफैक्ट जनरेटर जाँचता है कि Progress ShareFile इंस्टेंस CVE-2026-2699 प्रमाणीकरण बायपास के प्रति संवेदनशील है या नहीं। डिटेक्शन आर्टिफैक्ट जनरेटर...

CVE-2026-2699

CVE-2026-2699 — Обход аутентификации в Progress ShareFile Storage Zones Controller Критический обход аутентификации CVSS 9.8 в Progress ShareFile Storage Zones Controller SZC с самостоятельным управлением ≤ 5.12.3. 📋 Обзор CVE-2026-2699 — это серьёзная уязвимость обхода аутентификации,...

CTX-CVE-2020-7473

CTX-CVE-2020-7473 Citrix Sharefile भेद्यता जांच CTX-CVE-2020-7473 पर त्वरित अनुसंधान विवरण 2020.04.16 को बनाया गया भेद्यता जांच: एक वेब ब्राउज़र में खोलें https://yoursharefileserver.companyname.com/UploadTest.aspx या curl https://yoursharefileserver.companyname.com/UploadTest.aspx --path-as-is...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16137

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137

Progress ShareFile Storage Zones Controller v5.12.5 and below is vulnerable to path traversal via the resumable upload initiation endpoint, where unsanitized upload filenames allow authenticated users with zone credentials to write arbitrary files to any application-service-account-writable path,...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata in the CICO service allows a user with write access to a network share to execute arbitrary code on the host. CVSS 8.0 (HIGH) reflects adjacent-network attack vector with low comple...

EUVD-2026-60197

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16139

Progress ShareFile Storage Zones Controller ≤5.12.5 and ≤6.0.2 suffer path-traversal in the download preparation flow, allowing an authenticated zone admin to write files outside the intended directory. RCE is confirmed in v5 but unconfirmed in v6. No patch version is specified in the provided do...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...