watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile 인증 우회 Progress ShareFile 인증 우회 탐지 아티팩트 생성 도구 설명 이 탐지 아티팩트 생성기는 Progress ShareFile 인스턴스가 CVE-2026-2699 인증 우회에 취약한지 확인합니다. 탐지 아티팩트 생성기는 /ConfigService/Admin.aspx 엔드포인트에 GET 요청을 전송하고 응답을 확인합니다. 주의 - 이 도구는 전체 악용zone takeover을 수행하지 않으며 이 취약점을 RCECVE-2026-2701와 연쇄적으로...

CVE-2023-24489-ShareFile

ShareFile RCE CVE-2023-24489 이것은 ShareFile 애플리케이션CVE-2023-24489의 원격 코드 실행 취약점을 악용하는 Python 스크립트입니다. 이 취약점으로 인해 공격자는 대상 시스템에서 임의의 명령을 실행할 수 있습니다. 사용법 스크립트를 사용하려면 아래 지침을 따르세요: 1. 필요한 종속성을 설치합니다: pip install requests 2. 원하는 옵션으로 스크립트를 실행합니다: python cve.py --host --windows | --linux --cmd --mass-chec...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

CVE-2021-22941

사용 python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 참조 https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller 인증 우회 고객 관리형 Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3의 치명적 인증 우회CVSS 9.8 📋 개요 CVE-2026-2699 은 Progress ShareFile Storage Zones Controller고객 관리형 배포의 웹 인터페이스에 영향을 미치는 심각한 인증 우회 취약점입니다. 인증되지 않은 원격 공격자가 제한된 구성 페이지에 접근할 수 있으며,...

CTX-CVE-2020-7473

CTX-CVE-2020-7473 Citrix Sharefile 취약점 확인 빠른 연구 세부사항 CTX-CVE-2020-7473 제작일: 2020.04.16 취약점 확인: 웹 브라우저에서 엽니다 https://yoursharefileserver.companyname.com/UploadTest.aspx 또는 curl https://yoursharefileserver.companyname.com/UploadTest.aspx --path-as-is 빈 페이지 = 서버 취약 오류 404 = 서버 패치됨 참고: WAF/Netscaler...

CVE-2023-24489-poc

CVE-2023-24489-poc bash를 사용한 CVE-2023-24489용 POC입니다. 다음 형식으로 테스트하려는 대상이 담긴 target.txt 목록이 필요합니다: https://example1.com https://example2.com https://example3.com 파일은 bash 스크립트가 실행되는 동일한 디렉토리에 있어야 합니다. 주의해서 사용하십시오! 참조: https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/...

citrix-cve-2021-22941-lab

⚠️ 면책 조항 이 문서는 테스트 목적으로 CVE-2021-22941 취약점을 모의 시뮬레이션 한 것입니다. 모의 서버는 공식 CVE 및 익스플로잇 저장소에 문서화된 대로 Upload.aspx 엔드포인트에 인증 없이 접근할 수 있고 LocalFile GUID 응답을 반환하는 실제 취약한 동작을 재현합니다. 왜 모의 시뮬레이션인가? Citrix ShareFile Storage Zones Controller는 독점 엔터프라이즈 소프트웨어입니다 실제 취약한 인스턴스를 구축하려면 라이선스 소프트웨어와 복잡한 인프라가 필요합니다 이 모의...

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16137

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-16137

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137

Progress ShareFile Storage Zones Controller v5.12.5 and below is vulnerable to path traversal via the resumable upload initiation endpoint, where unsanitized upload filenames allow authenticated users with zone credentials to write arbitrary files to any application-service-account-writable path,...

EUVD-2026-60197

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata in the CICO service allows a user with write access to a network share to execute arbitrary code on the host. CVSS 8.0 (HIGH) reflects adjacent-network attack vector with low comple...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...