Horizon3 Attack Team's banner
Horizon3 Attack Team's profile picture

Horizon3 Attack Team

@Horizon3Attack • 13,088 subscribers

@Horizon3ai Attack Team | Security Research | Exploit Dev | TTPs

Shorts

Session keys and passwords aplenty, here’s our deep-dive for CVE-2025-5777, aka CitrixBleed 2. Apart from the normal root-cause analysis, we’ve doubled down on actionable steps to investigate Indicators of Compromise.

Session keys and passwords aplenty, here’s our deep-dive for CVE-2025-5777, aka CitrixBleed 2. Apart from the normal root-cause analysis, we’ve doubled down on actionable steps to investigate Indicators of Compromise.

58,246 views

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

While investigating prior CISA KEVs effecting N-able N-central, we discovered a series of vulns that would allow an unauth attacker to leak files via XXE, and in most cases, compromise the N-central database. The DB contains AD creds, API keys, SSH keys, and integration secrets. Check out our latest blog detailing CVE-2025-9316 and CVE-2025-11700.
0:56
Horizon3Attack's profile picture

While investigating prior CISA KEVs effecting N-able N-central, we discovered a series of vulns that would allow an unauth attacker to leak files via XXE, and in most cases, compromise the N-central database. The DB contains AD creds, API keys, SSH keys, and integration secrets. Check out our latest blog detailing CVE-2025-9316 and CVE-2025-11700.

Horizon3 Attack Team

10,040 views • 10 months ago

No more content to load