Turbo FTP Server 1.20.745 Directory Traversal

Date of Discovery: 17-Jun-2010 Credits: leinakesiatgmail.com Vendor: Turbo FTP Server Affected: Turbo FTP Server 1.20.745. Earlier versions may also be affected. Overview: 1.vendor description of software ------------------------------------------------ TurboFTP Server is a high performance,...

Open&Compact Ftp Server <= 1.2 Full System Access

Exploit for windows platform in category remote exploits ================================================= Open&Compact Ftp Server = 1.2 Full System Access ================================================= Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Softwar...

(Gabriels FTP Server) Open Compact FTP Server 1.2 - Full System Access

Gabriels FTP Server Open Compact FTP Server 1.2 - Full System Access Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3...

(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Full System Access

Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login process to the open ftp server it is...

CVE-2010-2073

authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...

CVE-2010-2073

authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...

Titan FTP XCRC Directory Traversal Information Disclosure

This module exploits a directory traversal vulnerability in the XCRC command implemented in versions of Titan FTP up to and including 8.10.1125. By making sending multiple XCRC command, it is possible to disclose the contents of any file on the drive with a simple CRC "brute force" attack. Althou...

Core FTP Server multiple security vulnerabilities

Multiple buffer overflows, directory traversals, DoS conditions...

BFTPD 2.x匿名账号绕过ROOTDIR安全限制漏洞

BUGTRAQ ID: 40540 Bftpd是一款小型的FTP服务器。 bftpd处理匿名登录时可能会忽略配置文件中所指定的ROOTDIR选项，允许用户绕过限制获得对系统上任意文件或目录的读写访问。 BFTPD 2.x 厂商补丁： BFTPD ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bftpd.sourceforge.net/news.html...

Wing FTP Server 3.5 admin_loginok.html页面HTML注入漏洞

BUGTRAQ: 40510 Wing FTP server的Administrator控制台（http://x.x.x.x:5466/adminloginok.html ）没有正确地过滤用户所提交请求中的参数，远程攻击者可以通过提交POST请求执行存储式跨站脚本攻击。 Wing FTP Server 3.5 厂商补丁： wftpserver.com -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpserver.com/index.htm...

FileCopa FTP Server Directory Traversal Vulnerability

This host is running FileCopa FTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfilecopadirectorytraversalvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FileCopa FTP Server Directory Traversal Vulnerability Authors: Veerendra GG Copyright: Copyright c...

FileCopa FTP Server Directory Traversal Vulnerability

FileCopa FTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Quick n Easy FTP Server Lite 3.1 - Denial of Service

Quick n Easy FTP Server Lite 3.1 - Denial of Service !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero "...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...

Wing FTP Server crossite scripting

Crossite scripting in administration interface...

Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC

Exploit for windows platform in category dos / poc =================================================== Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC =================================================== !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Quick 'n Easy FTP Server Lite 3.1 - Denial of Service

!/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero " print " http://www.exploit-db.com/author/DouBleZer0 "...

XFTP 3.0 Build 02.39 Long Filename Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...