what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Sergey Gordeychik

Citrix NetScaler SD-WAN SQL Injection / Traversal / Command Injection

Posted Oct 23, 2018

Authored by Sergey Gordeychik, Denis Kolegov, Nikita Oleksov, Nikolay Tkachenko, Oleg Broslavsky

The management interfaces of Citrix NetScaler SD-WAN physical appliances and virtual appliances suffer from command injection, information exposure, incorrect access control, IP spoofing, remote SQL injection, and directory traversal vulnerabilities.

tags | advisory, remote, spoof, vulnerability, sql injection, file inclusion

advisories | CVE-2012-2104, CVE-2016-4793, CVE-2018-17444, CVE-2018-17445, CVE-2018-17446, CVE-2018-17447, CVE-2018-17448

SHA-256 | e7627b90298023da272c5c16d0da665c56143382a6c2331b9af84784625a3870

Download | Favorite | View

WinCC Under X-Rays

Posted Jan 21, 2013

Authored by Sergey Gordeychik, Gleb Gritsai, Denis Baranov | Site ptsecurity.com

These are slides from a presentation call WinCC Under X-Rays.

tags | paper

SHA-256 | 48affd9265f6129d8e1b9288f64659adda11ce5640c00598776b5fa4cc425985

Download | Favorite | View

kiwicat-exec.txt

Posted Mar 6, 2007

Authored by Sergey Gordeychik | Site ptsecurity.com

Kiwi CatTools TFTP versions up to 3.2.8 suffer from information disclosure and remote code execution flaws.

tags | exploit, remote, code execution, info disclosure

SHA-256 | b460190db2a31b951af2921dbad695e292bf78d82c4b55011f8f1fc5898c889d

Download | Favorite | View