Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2023-4966

CriticalPublished

Unauthenticated sensitive information disclosure

Published: Oct 10, 2023
Updated: Jul 31, 2026
Assigning CNA: Citrix
Evidence observed: Oct 18, 2023

Primary CVSS

9.4/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Sources

CVE-2023-4966Exploit
CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit
citrix_cve-2023-4966Scanner
Parallelized exploit scanner for Citrix CVE-2023-4966 with file-based target handling, enabling rapid vulnerability verification across multiple hosts.
CVE-2023-4966-POCExploit
Proof Of Concept for te NetScaler Vuln
CVE-2023-4966

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Exploit

An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability

CVE-2023-4966Exploit

Programm to exploit a range of ip adresses

CVE-2023-4966PoC

Proof-of-concept exploit for CVE-2023-4966, a critical vulnerability in Citrix ADC and Gateway. Enables security researchers to test and validate exposure in affected environments.

CVE-2023-4966PoC

Proof-of-concept exploit for CVE-2023-4966, demonstrating the vulnerability and providing a basis for security testing and validation.

overreadPoC

Simulates CVE-2023-4966 Citrix Bleed overread bug

CVE-2023-4966-exploitExploit

CVE-2023-4966-exploit

cve-2025-5777Exploit

Memory disclosure vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway (VPN virtual server, ICA proxy, CVPN, RDP Proxy).

CVE-2025-5777Exploit

Python exploit for CVE-2025-5777 (CitrixBleed 2) memory leak in Citrix NetScaler. Sends malformed POST requests to leak ~127 bytes of RAM per request, extracting session tokens, credentials, and other sensitive data from uninitialized memory.