CVE-2012-2999

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

CVE-2012-2999

Cerberus FTP Server is vulnerable to cross-site request forgery (CSRF) in the web interface on versions prior to 5.0.5.0. The flaw allows an authenticated administrator’s session to be hijacked to perform actions such as adding a user or changing FTP service state via requests like /usermanager/u...

CVE-2012-5301

The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data...

CVE-2012-5301

Cerberus FTP Server prior to version 5.0.4.0 is affected by a DES cipher weakness in SSH sessions, allowing potential eavesdropping and easier brute-force attacks on encrypted traffic. The vulnerability stems from default configurations that enable DES, increasing the risk of sensitive data discl...

Cerberus FTP Server web interface cross-site request forgery vulnerability

Overview The Cerberus FTP Server web interface contains a cross-site request forgery vulnerability Description CWE-352: Cross-Site Request Forgery CSRF: The Cerberus FTP Server web interface is vulnerable to CSRF using the HTTP POST method in the :10000/usermanager/users/modify. The application h...

Cerberus-FTP-Server

Cerberus FTP Server 4.0.9.8 REST Remote Buffer Overflow Exploit Newer version's not tested, maybe vulnerable too ToDo: Add remote shell ToDo: Test vulnerable targets import errno from os import strerror from socket import import sys from time import sleep from struct import pack ip = sys.argv1 po...

JVN#99192898: Multiple GREE Android applications vulnerable in the WebView class

Multiple Android applications that use the SDK for HTML-based applications provided by GREE contain a vulnerability in the WebView class. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed. Solution Updat...

KLA10101 SB vulnerabilities in Cerberus FTP Server

A CSRF vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can hijack the administrators’ auth. This vulnerability can be exploited from the network at a point related to the web interface. Original advisories - Related products Cerberus-FTP-Server...

Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow

Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/49444/info Cerberus FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/49444/info Cerberus FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the application...

Cerberus FTP Server 4.0.9.8 Buffer Overflow

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Cerberus FTP Server 4.0.9.8 (REST) Remote BOF and Crash

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

CVE-2004-2769

Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the 1 MLSD or 2 MLST commands...

CVE-2004-2769

Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the 1 MLSD or 2 MLST commands...

CVE-2004-2769

Cerberus FTP Server before 4.0.3.0 is vulnerable. Remote authenticated users can list hidden files even when the Display hidden files option is disabled via MLSD/MLST commands. The Nessus NASL plugin for Cerberus FTP Server MLSD and MLST Command Hidden Files Security Bypass confirms affected vers...

Cerberus FTP Server MLSD and MLST Command Hidden Files Security Bypass

The version of Cerberus FTP server on the remote host is earlier than 4.0.3.0. Such versions are potentially affected by a security bypass vulnerability. The 'MLSD' and 'MLST' commands list hidden files despite the 'Display hidden files' option being disabled. A remote attacker, possibly...

Cerberus Helpdesk (XSS) Vulnerability

Exploit for php platform in category web applications ===================================== Cerberus Helpdesk XSS Vulnerability ===================================== Title : Cerberus Helpdesk XSS Vulnerability Author : Suliman From = EN|GMA7 Team Tested on : windows and Linux Homepage :...

Cerberus Helpdesk Cross Site Scripting

Title : Cerberus Helpdesk XSS Vulnerability Author : Suliman From = EN|GMA7 Team Tested on : windows and Linux Homepage : www.enigma7.net Contact : [email protected] Thanks to : Zaid - Mohammad - Hussain POC:...

Cerberus FTP server FTP server buffer overflow

Buffer overflow during authentication...

{PRL} Cerberus FTP server 3.0.6 Pre-Auth DoS

Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP...