Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-8209] Path Traversal on Citrix XenMobile Server

swarm.ptsecurity.com | research | CVE-2020-8209 | #vulnerability-research | #path-traversal | #citrix | #cve

Summary

CVE-2020-8209 in Citrix XenMobile Server: a path traversal in help-sb-download.jsp lets unauthenticated attackers read arbitrary files — including sftu.properties with encrypted passwords and the key files needed to decrypt them.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-48866 — WordPress Gravity Forms Plugin File Upload Path Traversal Arbitrary File Deletion (aretiq.ai)
  2. CVE-2026-48827 — Apache MINA SSHD sshd-git Path Traversal Info Disclosure (aretiq.ai)
  3. Yet another RCE in Gogs, but it's fixed this time! (aikido.dev)
  4. CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation (github.com)
  5. Vulnerabilities in the Openfire Admin Console (swarm.ptsecurity.com)
  6. Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW (xbow.com)

back