CVE-2020-36488

An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via /null// path commands...

CVE-2020-23040

Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands...

CVE-2020-23040

Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands...

Directory traversal

Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands...

Directory traversal

An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via /null// path commands...

CVE-2020-23040

Sky File v2.1.0 is affected by a directory traversal vulnerability in its FTP server that allows an attacker to access sensitive data via 'null' path commands. The issue arises from improper handling of directory traversal, enabling access to files outside the intended directory. Affected compone...

CVE-2020-36488

An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via /null// path commands...

CVE-2020-36488

CVE-2020-36488 describes a directory-traversal flaw in the FTP server of Sky File v2.1.0. The issue allows attackers to traverse directories using the /null// path commands, indicating improper input handling/validation in the server component. Per CVSS data in the initial document, the vulnerabi...

Debian DLA-2780-1 : ruby2.3 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2780 advisory. Multiple vulnerabilites in ruby2.3, interpreter of object-oriented scripting language Ruby, were discovered. CVE-2021-31799 In RDoc 3.11 through 6.x before 6.3.1, ...

CVE-2021-35495

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

Privilege escalation

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

CVE-2021-35495

CVE-2021-35495 — TIBCO JasperReports Server Scheduler Connection exposure : An authenticated user with network access can obtain FTP passwords of other users via the Scheduler Connection component. Affected products include TIBCO JasperReports Server and variants (Community, Developer, AWS Market...

Fedora: Security Advisory for proftpd (FEDORA-2021-7bb9676b2e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor.Win32.Hupigon.afjk Authentication Bypass / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/8dc8abc99c1e7908fe9d048a4e360960.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.afjk Vulnerability: Authentication Bypass RCE Description: The malware runs a...

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data OACK and other options.

...

[SECURITY] Fedora 35 Update: proftpd-1.3.7c-1.fc35

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Vulnerabilities fixed in sqlite3

Vulnerabilities have been fixed in sqlite. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data -= SUSE =- SUSE has made updates available to address the...

EFI Fiery Detection (FTP)

FTP based detection of EFI Fiery. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Fedora: Security Advisory for proftpd (FEDORA-2021-0a148b34a5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: proftpd-1.3.7c-1.fc33

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...