⤷ Title: CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:30:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Privilege Escalation #Authentication Bypass #Citrix Vulnerability #Critical CVE #CVE_2024_6235 #Internal API Exploit #NetScaler Console #Rapid7
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:30:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Privilege Escalation #Authentication Bypass #Citrix Vulnerability #Critical CVE #CVE_2024_6235 #Internal API Exploit #NetScaler Console #Rapid7
Daily CyberSecurity
CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
⤷ Title: Server‑Side Parameter Pollution: Hijacking Query Strings for Admin‑Level Access
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 05:01:13 GMT
════════════════════════
⌗ Tags: #server_side_pollution #http_parameter_pollution #internal_api_exploitation #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 05:01:13 GMT
════════════════════════
⌗ Tags: #server_side_pollution #http_parameter_pollution #internal_api_exploitation #bug_bounty_tips #bug_bounty
Medium
Server‑Side Parameter Pollution: Hijacking Query Strings for Admin‑Level Access
[Write-up] Exploiting Server-Side Parameter Pollution in a Query String.
⤷ Title: From “Just an Error” to Full Read/Write Access on Someone Else’s Data
════════════════════════
𐀪 Author: Mostafa shaban
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 09:11:35 GMT
════════════════════════
⌗ Tags: #mass_assignment #idor #internal_api #bug_bounty #sql_injection
════════════════════════
𐀪 Author: Mostafa shaban
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 09:11:35 GMT
════════════════════════
⌗ Tags: #mass_assignment #idor #internal_api #bug_bounty #sql_injection
Medium
From “Just an Error” to Full Read/Write Access on Someone Else’s Data
Hey, folks!