EUVD-2019-15197

Malware in sbrugna...

EUVD-2016-3434

Malware in sbrugna...

EUVD-2016-3435

Malware in sbrugna...

EUVD-2016-3437

Malware in sbrugna...

EUVD-2008-6971

Malware in sbrugna...

EUVD-2016-3436

Malware in sbrugna...

Exploitation of Accellion File Transfer Appliance

Summary This joint advisory is the result of a collaborative effort by the cybersecurity authorities of Australia,1 New Zealand,2 Singapore,3 the United Kingdom,4 and the United States.56 These authorities are aware of cyber actors exploiting vulnerabilities in Accellion File Transfer Appliance...

Accellion FTA SSRF

The vulnerability of the Accellion FTA security system is related to insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and gain unauthorized access to protected information through specially created POST requests...

CVE-2021-27730

Accellion FTA 912432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA912444 and later...

Accellion FTA injection vulnerability

Accellion FTA is an enterprise content firewall from Accellion USA, Inc. It provides a protection against data leakage and breaches from third-party network risks. An injection vulnerability exists in Accellion FTA 912432 and earlier, which stems from being vulnerable to parameter injection via a...

Accellion FTA Server-Side Request Forgery Vulnerability

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. A server-side request forgery vulnerability exists in Accellion FTA 912411 and earlier versions. An attacker can exploit this...

Accellion FTA OS Command Injection Vulnerability

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. An OS command injection vulnerability exists in Accellion FTA 912370 and earlier versions. An attacker can exploit this vulnerability by...

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

Hardcoded credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

Command injection

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

CVE-2019-5623 Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

CVE-2019-5622: Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

CVE-2019-5623: Improper Neutralization of Special Elements used in a Command

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

PT-2020-11149

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to the use of hard-coded credentials, which is an instance of CWE-798. This means that the credentials are embedded directly in the software, potentially...

PT-2020-11150

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to an instance of CWE-77, which involves improper neutralization of special elements used in a command, also known as command injection. This allows for...