CVE-2023-24489-ShareFile

ShareFile RCE CVE-2023-24489 这是一个利用ShareFile应用程序中远程代码执行漏洞（CVE-2023-24489）的Python脚本。该漏洞允许攻击者在目标系统上执行任意命令。 使用方法 请按照以下说明使用该脚本： 1. 安装所需的依赖项： root@kitploit: pip install requests 2. 使用所需选项运行脚本： root@kitploit: python cve.py --host --windows | --linux --cmd --mass-check 可用选项如下： --host：指定要利用的目标URL。...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile 身份验证绕过 Progress ShareFile 身份验证绕过检测工件生成器工具 描述 此检测工件生成器用于验证 Progress ShareFile 实例是否存在 CVE-2026-2699 身份验证绕过漏洞。 检测工件生成器向 /ConfigService/Admin.aspx 端点发送 GET 请求并验证响应。 注意 - 此工具不执行完整利用（区域接管），也不会将此漏洞与 RCE（CVE-2026-2701）进行链式利用。 检测演示 针对存在漏洞的实例进行测试： root@kitploit: $ python3...

CVE-2021-22941

使用 python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 参考 https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller 身份验证绕过 严重身份验证绕过 CVSS 9.8 影响客户管理的 Progress ShareFile Storage Zones Controller SZC 版本 ≤ 5.12.3。 📋 概述 CVE-2026-2699 是一个严重身份验证绕过漏洞，影响 Progress ShareFile Storage Zones Controller 的 Web 界面（客户管理部署）。 未经身份验证的远程攻击者可以访问受限配置页面，这可能导致系统配置更改，并且当与...

citrix-cve-2021-22941-lab

⚠️ Aviso legal Esta es una simulación simulada de la vulnerabilidad CVE-2021-22941 con fines de prueba. El servidor simulado replica el comportamiento vulnerable real donde el endpoint Upload.aspx es accesible sin autenticación y devuelve respuestas LocalFile GUID, según lo documentado en los...

CTX-CVE-2020-7473

CTX-CVE-2020-7473 Citrix Sharefile 漏洞检查 CTX-CVE-2020-7473 快速研究详情 创建于 2020.04.16 漏洞检查： 在网页浏览器中打开 https://yoursharefileserver.companyname.com/UploadTest.aspx 或 curl https://yoursharefileserver.companyname.com/UploadTest.aspx --path-as-is 空白页面 = 服务器存在漏洞 错误 404 = 服务器已修补 备注： 如果位于 WAF/Netscaler...

CVE-2023-24489-poc

CVE-2023-24489-poc POC para CVE-2023-24489 con bash. Necesita una lista de target.txt llena de los objetivos que quieres probar en este formato: https://example1.com https://example2.com https://example3.com El archivo debe estar en el mismo directorio donde se ejecuta el script bash. ¡Por favor,...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16137

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137

Progress ShareFile Storage Zones Controller v5.12.5 and below is vulnerable to path traversal via the resumable upload initiation endpoint, where unsanitized upload filenames allow authenticated users with zone credentials to write arbitrary files to any application-service-account-writable path,...

EUVD-2026-60197

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata in the CICO service allows a user with write access to a network share to execute arbitrary code on the host. CVSS 8.0 (HIGH) reflects adjacent-network attack vector with low comple...

CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

CVE-2026-16139

Progress ShareFile Storage Zones Controller ≤5.12.5 and ≤6.0.2 suffer path-traversal in the download preparation flow, allowing an authenticated zone admin to write files outside the intended directory. RCE is confirmed in v5 but unconfirmed in v6. No patch version is specified in the provided do...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...