89 matches found
CVE-2025-3371
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-3371
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-3371 PCMan FTP Server DELETE Command buffer overflow
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-3371 PCMan FTP Server DELETE Command buffer overflow
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-3371
CVE-2025-3371 affects PCMan FTP Server 2.0.7, due to a buffer overflow in the DELETE Command Handler when processing input. This enables remote exploitation as described; various sources note a public exploit or disclosure. Remediation guidance across connected documents suggests disabling the DE...
PCMan FTP Server 安全漏洞
PCMan FTP Server is PCMan open source FTP software package . PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the DELETE Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...
PT-2025-15237 · Unknown · Pcman Ftp Server
Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the DELETE Command Handler component, leading to a buffer overflow. This issue can be exploited remotely. Recommendations: For PCMan FTP Server version 2.0.7,...
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACTs WP 6xxx, allows a perpetrator to gain full access to the device.
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems like PHOENIX CONTACT WP 6xxx exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor, operating remotely,...
CVE-2023-3621
A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is the function createDeleteCommand of the file ?r=article/default/delete of the component Delete Packet. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has...
IBOS SQL注入漏洞
IBOS is a collaborative office management system. An SQL injection vulnerability exists in IBOS OA version 4.5.5, which stems from the createDeleteCommand function of file article/default/delete that causes sql injection...
LS ELECTRIC XBC-DN32U Access Control Error Vulnerability (CNVD-2023-21679)
The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An access control error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80, which stems from a lack of authentication for the delete command and can be exploited by an attacker to delete...
SUSE CVE-2006-2414
Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...
LS ELECTRIC XBC-DN32U 访问控制错误漏洞
The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An access control error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80, which stems from a lack of authentication for the delete command and can be exploited by an attacker to delete...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
Incorrect access control vulnerability in Joomla!
Joomla! is a world-renowned content management system developed using the PHP language with a MySQL database, and can be implemented on various platforms such as Linux, Windows, MacOSX, etc. An incorrect access control vulnerability exists in Joomla! version 4.0.0. The vulnerability stems from th...
CVE-2020-35227
A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices in the administration web panel allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command...
Netgear NETGEAR JGS516PE 缓冲区错误漏洞
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A buffer overflow vulnerability exists in the access control section of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker can exploit this vulnerability by injecting IP addresses into a whitelist via the...
Crestron Multiple Products CTP Console DELETE Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Crestron's Android-based products. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DELETE command of the CTP console. The issue results from the la...
Malware exploit: Umbra
Type: SQLi Vuln: http://localhost/deletecommand.php?deleteID=1...
PCMan FTP Server 'DELETE' Command Buffer Overflow Vulnerability
PCMan FTP Server is a full-featured FTP server software. A buffer overflow vulnerability exists in PCMan FTP Server version 2.0.7. A remote attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application with the help of a long string in the DELETE...