6463 matches found
Wing FTP Server Authenticated Command Execution Exploit
This Metasploit module exploits the embedded Lua interpreter in the admin web interface for versions 4.3.8 and below. When supplying a specially crafted HTTP POST request an attacker can use os.execute to execute arbitrary system commands on the target with SYSTEM privileges. This module requires...
Wing FTP Server Authenticated Command Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wing FTP Server Authenticated Command Execution', 'Description' = %q This module exploits the embedded Lua interpreter in the admin w...
Wifi FTP Server iOS - Directory Traversal Vulnerability
Document Title: =============== Wifi FTP Server iOS - Directory Traversal Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1299 View: https://www.youtube.com/watch?v=M67s2AEr32k Release Date: ============= 2014-08-25 Vulnerability Laboratory ID VL-ID:...
Wifi FTP Server iOS - Directory Traversal Vulnerability
Document Title: =============== Wifi FTP Server iOS - Directory Traversal Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1299 View: https://www.youtube.com/watch?v=M67s2AEr32k Release Date: ============= 2014-08-25 Vulnerability Laboratory ID VL-ID:...
WebSTAR FTP Server USER 溢出漏洞
No description provided by source...
Cerberus FTP Server 6.x < 6.0.10.0 / 7.x < 7.0.0.3 Multiple OpenSSL Vulnerabilities
The version of Cerberus FTP Server on the remote host is version 6.x prior to 6.0.10.0 or version 7.x prior to 7.0.0.3. It is, therefore, affected by the following OpenSSL vulnerabilities : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions or...
Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability
From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...
Yahoo!: Out-of-band read of arbitrary ASCII files on YQL backend servers via XML external parameter entities
The Yahoo Query Language YQL service allowed arbitrary XML documents to be loaded via the feednormalizer table and its prexslurl parameter. This enabled an attacker to exfiltrate data from the YQL backend servers by defining external parameter entities in the XML document that read local files. T...
Serv-U FTP Server < 15.1.0.458 Multiple Vulnerabilities
According to its banner, the installed version of Serv-U is a version prior to 15.1.0.458. It is, therefore, affected by a cross-site scripting vulnerability, an information-disclosure vulnerability, and multiple unspecified security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security...
Quick 'n Easy FTP Server Lite 3.1
No description provided by source. !/usr/bin/python print \n print Team Hackers Garage print Quick 'n Easy FTP Server Lite Version 3.1 print Crash PoC print Sumit Sharma aka b0nd print [email protected] print print Special Thanks to: DoubleZero print http://www.exploit-db.com/author/DouBleZer0...
FileZilla 2.2.15 FTP Client Hard-Coded Cipher Key Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in an XML file or the...
GlobalSCAPE Secure FTP Server Input Overflow
No description provided by source. $Id: globalscapeftpinput.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
GlobalSCAPE Secure FTP Server 2.0 Build 03.11.2004.2 SITE Command Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9904/info It has been reported that Secure FTP Server may be prone to a remote buffer overflow vulnerability that may allow attackers to execute arbitrary code on a vulnerable system in order to gain unauthorized access. ...
Gene6 G6 FTP Server 2.0 - Buffer Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a...
FileCOPA FTP Server <= 1.01 (LIST) Remote BoF Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
ToxSoft NextFTP 1.82 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/572/info ToxSoft's shareware FTP client, NextFTP, contains an unchecked buffer in the code that parses CWD command replies. If the FTP server's reply contains the exploit code, arbitrary commands can be run on the client...
Baby FTP Server 1.24 - Denial of Service
No description provided by source. !/usr/bin/perl Note from Exploit-DB thanks @wireghoul: This PoC only crashes the GUI for the application, not the server itself. Exploit Title: Baby FTP Server Version 1.24 Denial Of Service Date: 2013/6/25 Exploit Author: Chako Vendor Homepage:...
Typsoft FTP Server 1.10 Multiple Commands DoS
No description provided by source. !/usr/bin/perl Exploit Title: Typsoft FTP Server DoS CWD command Date: 02/06/2012 Author: Balazs Makany Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows 7 does not work on Windows XP Please note, that you need to have a...
MollenSoft Lightweight FTP Server 3.6 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability is due to a lack of sufficient...
Meteor FTP Server 1.2/1.5 USER Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash. Further...