CVE-2019-11383

CVE-2019-11383 affects the Medha WiFi FTP Server Android app (version 1.8.3). The issue allows an attacker to read the legitimate user’s credentials from the file /data/data/com.medhaapps.wififtpserver/shared_prefs/com.medhaapps.wififtpserver_preferences.xml, indicating an information disclosure ...

FTPBruter - A FTP Server Brute Forcing Tool

Brute forcing tool for FTP server. FTPBruter can work in any OS if they have and support Python 3. Feature Brute force a FTP server with a username or a list of usernames That's all. Install and Run on Linux You have to install Python 3 first: Install Python 3 on Arch Linux and its distros: sudo...

Titan FTP Server Path Traversal Vulnerability

Titan FTP Server is an FTP file transfer server. A directory traversal vulnerability exists in the Titan FTP Server 2019 build 3505 release. An attacker can exploit this vulnerability to load arbitrary files...

Titan FTP Server 2019 Build 3505 Directory Traversal

Discovered By: Kevin Randall on 3/23/2019 A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file through PreviewHandler.ashx by using a ....\ technique, arbitrary files can be loaded in the...

Titan FTP Server Version 2019 Build 3505 Directory Traversal / Local File Inclusion Vulnerabilities

Exploit for windows platform in category web applications Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link: https://titanftp.com/download Version: Firmware: Titan FTP...

PCMan FTP Server 2.0 CDUP Remote Buffer Overflow Exploit

!/usr/bin/python import socket, sys, os, time print "\n===============================\n" print " PCMan FTP Server 2.0 - 'CDUP' Remote Buffer Overflow \n " print " Date: 23/03/2019 \n " print " Affected Software: PCMan 2.0 \n " print " Tested on Mincrsoft Windows XP Professional Version 2002 SP2 ...

PCMan FTP Server 2.0 CDUP Remote Buffer Overflow

!/usr/bin/python import socket, sys, os, time print "\n===============================\n" print " PCMan FTP Server 2.0 - 'CDUP' Remote Buffer Overflow \n " print " Date: 23/03/2019 \n " print " Affected Software: PCMan 2.0 \n " print " Tested on Mincrsoft Windows XP Professional Version 2002 SP2 ...

Titan FTP Server Version 2019 Build 3505 - Directory Traversal Local File Inclusion

Titan FTP Server Version 2019 Build 3505 - Directory Traversal Local File Inclusion Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Google Dork: N/A Date: 3/26/2019 Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link:...

Titan FTP Server Version 2019 Build 3505 - Directory Traversal / Local File Inclusion

Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Google Dork: N/A Date: 3/26/2019 Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link: https://titanftp.com/download Version: Firmware: Titan FTP Server Version 2019 Buil...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Cross site scripting

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Design/Logic Flaw

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file...

CVE-2018-15906

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file...

CVE-2018-15906

CVE-2018-15906 affects SolarWinds Serv-U FTP Server 15.1.6. A remote authenticated user can exploit the Import feature by modifying a CSV, enabling privilege escalation to SYSTEM and remote code execution on default Windows installations. Documented impact includes escalation from Domain Administ...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

CVE-2018-19934

The vulnerability CVE-2018-19934 affects SolarWinds Serv-U FTP Server 15.1.6.25. It is a reflected cross-site scripting (XSS) flaw in the Web management interface, exploit happening via the URL path and HTTP POST parameters. The issue is documented across multiple sources (NVD, Red Hat advisory) ...

Core FTP Server FTP SFTP Server v2 Build 674 - MDTM Directory Traversal

Core FTP Server FTP SFTP Server v2 Build 674 - MDTM Directory Traversal Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal Google Dork: N/A Date: 3/13/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link:...

Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal

Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Google Dork: N/A Date: 4/27/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link: http://www.coreftp.com/server/index.html Version: Firmware: CoreFTP Server FTP / SFTP Serv...

Core FTP Server FTP / SFTP Server v2 Build 674 - SIZE Directory Traversal Exploit Vulnerability

Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Google Dork: N/A Date: 3/13/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link: http://www.coreftp.com/server/index.html Version: Firmware: CoreFTP Server FTP / SFTP Serv...

Design/Logic Flaw

The Olive Tree FTP Server aka com.theolivetree.ftpserver application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts and drops certain packets...