CVE-2024-52309

SFTPGo CVE-2024-52309 involves the EventManager allowing administrators to execute scripts or commands, which can grant access to the underlying OS/container with the same permissions as the SFTPGo process. The root cause is that command execution could be performed by any admin with script-permi...

CVE-2024-52309

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

CVE-2024-52309 SFTPGo allows administrators to restrict command execution from the EventManager

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

CVE-2024-52309: Improper Input Validation

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

eventmanager-online.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-689896 Description| Value ---|--- Affected Website:| eventmanager-online.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CakePHP 3.0.16, 3.1.11, and 3.2.3 Released

CakePHP 3.0.16, 3.1.11, and 3.2.3 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 3.0.16, 3.1.11, and 3.2.3. These releases contain security fixes. 3.2.3 and also contains bugfixes. Security Fixes An issue in PaginatorHelper has been fixed that would allo...

Epson EventManager <= 2.50 Denial of Service

No description provided by source. Luigi Auriemma Application: Epson EventManager http://www.epson.com Versions: = 2.50 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...

Epson EventManager 'x-protocol-version' Denial of Service Vulnerability

This host is running Epson EventManager and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodepsoneventmanagerdosvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Epson EventManager 'x-protocol-version' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...

Epson EventManager 'x-protocol-version' Denial of Service Vulnerability

Epson EventManager is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Epson EventManager 2.50 - Denial of Service

Epson EventManager 2.50 - Denial of Service Luigi Auriemma Application: Epson EventManager http://www.epson.com Versions: 53 PUSH EBX 01639680 |. 8B5C24 24 MOV EBX,DWORD PTR SS:ESP+24 01639684 |. 53 PUSH EBX 01639685 |. 50 PUSH EAX 01639686 |. E8 25F8FFFF CALL epnsm.01638EB0 ; parse...

Epson EventManager 2.50 - Denial of Service

Luigi Auriemma Application: Epson EventManager http://www.epson.com Versions: 53 PUSH EBX 01639680 |. 8B5C24 24 MOV EBX,DWORD PTR SS:ESP+24 01639684 |. 53 PUSH EBX 01639685 |. 50 PUSH EAX 01639686 |. E8 25F8FFFF CALL epnsm.01638EB0 ; parse "x-protocol-version" string 0163968B |. 83C4 08 ADD ESP,8...