242 matches found
Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting
Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript. id: CVE-2019-19368 info: name: Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting author:...
The vulnerability of FTP servers for managing Rumpus files, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.
The vulnerability of the FTP server used to manage Rumpus files is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of FTP servers for managing Rumpus files, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.
The vulnerability of the FTP server used to manage Rumpus files is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of FTP servers for managing Rumpus files, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.
The vulnerability of the FTP server for managing Rumpus files is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of FTP servers for managing Rumpus files, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of FTP servers for managing Rumpus files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of FTP servers for managing Rumpus files, which stems from the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the FTP server for managing Rumpus files is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2025-55059
CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...
CVE-2025-55058
CVE-2025-55058 is tied to CWE-20 Improper Input Validation. Public records (NVD, Red Hat, EUVD, CVE list, CNNVD) cite an input validation error, with CNNVD naming Maxum Rumpus FTP Server as affected (version 9.0.12) in their entry. Evidence does not consistently specify vendor/product coverage ac...
CVE-2025-55057
CVE-2025-55057 corresponds to multiple CSRF (CWE-352) vulnerabilities. NVD metrics indicate a HIGH impact (C/H/I/A all high) with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; exploitation requires user interaction. Connected sources reiterate CSRF risk but do not specify affected product...
CVE-2025-55056
CNNVD-202511-1880 reports CVE-2025-55056 as affecting Maxum Rumpus FTP Server, specifically version 9.0.12, with a cross-site scripting flaw caused by improper input neutralization during web page generation. The description notes XSS as the impact, but does not provide exploit details or a confi...
CVE-2025-55055
CVE-2025-55055 pertains to an OS command injection in Maxum Rumpus FTP Server 9.0.12, caused by improper neutralization of special elements. This could allow an attacker to execute arbitrary commands on the affected system. Public details about a fix are not provided in the connected documents; m...
Maxum Rumpus FTP Server 输入验证错误漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. An input validation error vulnerability exists in Maxum Rumpus FTP Server version 9.0.12 that stems from improper input validation...
Maxum Rumpus FTP Server 操作系统命令注入漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. An operating system command injection vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper neutralization of a special element and can lead to OS command injection...
Maxum Rumpus FTP Server 跨站脚本漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site scripting vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper input neutralization and could lead to cross-site scripting attacks...
Maxum Rumpus FTP Server 跨站脚本漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site scripting vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper input neutralization and could lead to cross-site scripting attacks...
Maxum Rumpus FTP Server 跨站请求伪造漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site request forgery vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from cross-site request forgery...
EUVD-2020-29380
Malware in sbrugna...
EUVD-2020-5025
Malware in sbrugna...
CVE-2020-8514
An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality...
CVE-2020-27574
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...