Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-19781

KEV · Ransomware EPSS 94.44% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-19781

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Citrix Application Delivery Controller和Citrix Systems Gateway 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Systems NetScaler Gateway（Citrix Systems Gateway）和Citrix Application Delivery Controller（ADC）都是美国思杰系统（Citrix Systems）公司的产品。Citrix Systems NetScaler Gateway是一套安全的远程接入解决方案。该方案可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix Application Delivery Controll
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2019-19781

#POC DescriptionSource LinkShenlong Link
1Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]https://github.com/projectzeroindia/CVE-2019-19781POC Details
2This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.https://github.com/trustedsec/cve-2019-19781POC Details
3Test a host for susceptibility to CVE-2019-19781https://github.com/cisagov/check-cve-2019-19781POC Details
4Citrix ADC Remote Code Executionhttps://github.com/jas502n/CVE-2019-19781POC Details
5Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]https://github.com/ianxtianxt/CVE-2019-19781POC Details
6CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploithttps://github.com/mpgn/CVE-2019-19781POC Details
7CVE-2019-19781 Citrix RCEhttps://github.com/oways/CVE-2019-19781POC Details
8Took at stab at an NSE discovery script for CVE-2019-19781.https://github.com/becrevex/Citrix_CVE-2019-19781POC Details
9All Working Exploitshttps://github.com/unknowndevice64/Exploits_CVE-2019-19781POC Details
10A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash / Shitrixhttps://github.com/haxrob/citrixmash_scannerPOC Details
11My working exploit script for Shitrix (CVE-2019-19781)https://github.com/jamesjguthrie/Shitrix-CVE-2019-19781POC Details
12DFIR notes for Citrix ADC (NetScaler) appliances vulnerable to CVE-2019-19781https://github.com/haxrob/CVE-2019-19781POC Details
13Citrix Netscaler RCEhttps://github.com/hollerith/CVE-2019-19781POC Details
14Automated script for Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.https://github.com/aqhmal/CVE-2019-19781POC Details
15Detect and log CVE-2019-19781 scan and exploitation attempts.https://github.com/MalwareTech/CitrixHoneypotPOC Details
16The exploitation module for the CVE-2019-19781 #Shitrix (Vulnerability in Citrix Application Delivery Controller and Citrix Gateway).https://github.com/mekhalleh/citrix_dir_traversal_rcePOC Details
17Nonehttps://github.com/zenturacp/cve-2019-19781-webPOC Details
18Check your website for CVE-2019-19781 Vulnerablehttps://github.com/zgelici/CVE-2019-19781-CheckerPOC Details
19IOCs for CVE-2019-19781https://github.com/digitalshadows/CVE-2019-19781_IOCsPOC Details
20Automated forensic script hunting for cve-2019-19781https://github.com/onSec-fr/CVE-2019-19781-ForensicPOC Details
21This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system informationhttps://github.com/DanielWep/CVE-NetScalerFileSystemCheckPOC Details
22Nonehttps://github.com/Castaldio86/Detect-CVE-2019-19781POC Details
23Check ADC for CVE-2019-19781https://github.com/j81blog/ADC-19781POC Details
24批量概念驗證用https://github.com/b510/CVE-2019-19781POC Details
25CVE-2019-19781 Attack Triage Scripthttps://github.com/redscan/CVE-2019-19781POC Details
26CVE-2019-19781 bash exploit https://github.com/ynsmroztas/citrix.shPOC Details
27Código desenvolvido para a verificação em massa da vulnerabilidade CVE-2019-19781 de hosts descobertos pelo Shodan. Pull requests são bem vindas. https://github.com/digitalgangst/massCitrixPOC Details
28Indicator of Compromise Scanner for CVE-2019-19781https://github.com/mandiant/ioc-scanner-CVE-2019-19781POC Details
29Indicator of Compromise Scanner for CVE-2019-19781https://github.com/citrix/ioc-scanner-CVE-2019-19781POC Details
30Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attemptshttps://github.com/haxrob/citrix-honeypotPOC Details
31:microscope: Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781https://github.com/L4r1k/CitrixNetscalerAnalysisPOC Details
32My Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes. https://github.com/Azeemering/CVE-2019-19781-DFIR-NotesPOC Details
33a script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomainshttps://github.com/0xams/citrixvulncheckPOC Details
34Python CVE-2019-19781 exploithttps://github.com/r4ulcl/CVE-2019-19781POC Details
35Gather a list of Citrix appliances in a country / state pair, and check if they're vulnerable to CVE-2019-19781https://github.com/nmanzi/webcvescannerPOC Details
36Nonehttps://github.com/darren646/CVE-2019-19781POCPOC Details
37citrix adc rcehttps://github.com/5l1v3r1/Citrix_CVE-2019-19781POC Details
38This document explain Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [CVE-2019-19781]https://github.com/Roshi99/Remote-Code-Execution-Exploit-for-Citrix-Application-Delivery-Controller-and-Citrix-Gateway-CVE-201POC Details
39Nonehttps://github.com/yukar1z0e/CVE-2019-19781POC Details
40Nonehttps://github.com/SharpHack/CVE-2019-19781POC Details
41修改的poc，适用于python3https://github.com/qiong-qi/CVE-2019-19781-pocPOC Details
42Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781https://github.com/w4fz5uck5/CVE-2019-19781-CitrixRCEPOC Details
43Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.https://github.com/andripwn/CVE-2019-19781POC Details
44Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit https://github.com/VladRico/CVE-2019-19781POC Details
45Nonehttps://github.com/pwn3z/CVE-2019-19781-CitrixPOC Details
46Citrix ADC RCE cve-2019-19781https://github.com/Vulnmachines/Ctirix_RCE-CVE-2019-19781POC Details
47CVE-2019-19781https://github.com/k-fire/CVE-2019-19781-exploitPOC Details
48Nonehttps://github.com/zerobytesecure/CVE-2019-19781POC Details
49Nonehttps://github.com/citrixgitoff/-ioc-scanner-CVE-2019-19781POC Details
50RCE, Citirx ADC and Gateway Directory Traversalhttps://github.com/chihyeonwon/CVE-2019-19781POC Details
51RCE, Citirx ADC and Gateway Directory Traversalhttps://github.com/mr-won/CVE-2019-19781POC Details
52Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 are susceptible to directory traversal vulnerabilities.https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19781.yamlPOC Details
53Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/Citrix%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2019-19781.mdPOC Details
54RCE, Citirx ADC and Gateway Directory Traversalhttps://github.com/user20252228/CVE-2019-19781POC Details
55A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmashhttps://github.com/awesome-security/citrixmash_scannerPOC Details
56Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attemptshttps://github.com/EliusHHimel/citrix-honeypotPOC Details
57RCE, Citirx ADC and Gateway Directory Traversalhttps://github.com/tpdlshdmlrkfmcla/CVE-2019-19781POC Details
58Nonehttps://github.com/autocode07/cisagov__check-cve-2019-19781.4142e02bPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-19781

请登录查看更多情报信息。

Same Patch Batch · n/a · 2019-12-27 · 66 CVEs total

CVE-2016-1000028Tenable Network Security Nessus 跨站脚本漏洞
CVE-2019-20013GNU LibreDWG 资源管理错误漏洞
CVE-2019-20012GNU LibreDWG 资源管理错误漏洞
CVE-2019-20011GNU LibreDWG 缓冲区错误漏洞
CVE-2019-20043WordPress 安全漏洞
CVE-2019-20042WordPress 跨站脚本漏洞
CVE-2019-20041WordPress 输入验证错误漏洞
CVE-2014-4523WordPress Easy Career Openings 跨站脚本漏洞
CVE-2014-4525WordPress Ebay Feeds 跨站脚本漏洞
CVE-2014-4559WordPress Swipe Checkout for WP e-Commerce 跨站脚本漏洞
CVE-2019-20016libmysofa 缓冲区错误漏洞
CVE-2016-1000029Tenable Network Security Nessus 跨站脚本漏洞
CVE-2019-16896K7 Computing Ultimate Security 后置链接漏洞
CVE-2013-4691Sencha Labs Connect 跨站脚本漏洞
CVE-2013-4664SPBAS Business Automation Software 跨站脚本漏洞
CVE-2013-4665SPBAS Business Automation Software 跨站请求伪造漏洞
CVE-2013-4693WordPress Xorbin Digital Flash Clock 跨站脚本漏洞
CVE-2013-4695Winamp 安全漏洞
CVE-2013-4692Xorbin Analog Flash Clock 跨站脚本漏洞
CVE-2013-4763Samsung Galaxy S3和Samsung Galaxy S4 安全漏洞

Showing top 20 of 66 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2019-19781

No comments yet

Leave a comment