## https://sploitus.com/exploit?id=F21701FD-A4C0-560F-B5D7-2BE0E95B6587
This is a Python script that exploits the CVE-2019-19781 vulnerability in Citrix Application Delivery Controller and Citrix Gateway. The script is designed to upload a malicious XML file to the vulnerable device, which will execute the code contained within, resulting in remote code execution.
The script takes a URL as input, which is the IP address or hostname of the vulnerable device. It then uses the `requests` library to send a GET request to the `/vpn/../vpns/portal/scripts/newbm.pl` endpoint, which is a script that is used to create new bookmarks on the device. The script sends a POST request to this endpoint with a specially crafted XML payload that contains a malicious bookmark with a command to execute the code contained within.
The script also includes a banner that displays the name of the vulnerability and a message indicating that the script is designed to execute remote code on the vulnerable device.
The script is designed to be used by an attacker to gain access to the vulnerable device and execute arbitrary code on it. It is not intended to be used for legitimate purposes and is only for educational or testing purposes.
The script uses the `requests` library to send HTTP requests to the vulnerable device, and it does not include any error handling or other safety features. It is recommended that the script