pentester.land· Feb 20, 2024· by Dylan Pindur, Shubham Shah (@infosec_au), Adam Kues (@hash_kitten)🔍 CVE-2023-5914

Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184

Open Original Article ↗
Target Program: Citrix Systems
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Reflected XSS#SSO#RCE#.NET Remoting#Insecure deserialization#Security code review#CVE-2023-5914#CVE-2023-6184

More Writeups Like This

pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)
pentester.land

Molding Lies Into Reality || Exploiting CVE-2024-4358

by Sina Kheirkhah (@SinSinology)
pentester.land

Java Deserialization Tricks

by Clément Amic (@loadlow)
pentester.land

Leaking ObjRefs to Exploit HTTP .NET Remoting

by Markus Wulftange (@mwulftange)