6448 matches found
GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, FTP, CVE-2014-6271/CVE-2014-6278) - Active Check
GNU Bash is prone to a remote command execution RCE vulnerability dubbed SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNU Bash Environment Variable Handling Code Injection via ProFTPD (Shellshock)
The remote FTP server is affected by a remote code execution vulnerability due to an error in the Bash shell running on the remote host. A remote, unauthenticated attacker can execute arbitrary code on the remote host by sending a specially crafted request via the USER FTP command. The 'modexec'...
Wing FTP Server <= 4.3.8 Authenticated Command Execution Vulnerability
Wing FTP Server is prone to an authenticated command execution vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wing FTP Server Authenticated Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::CmdStager include Msf::Exploit::Remote::HttpClient def...
Wing FTP Server - (Authenticated) Command Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wing FTP Server Authenticated Command Execution', 'Description' = %q This module exploits the embedded Lua interpreter in the admin w...
Wing FTP Server Authenticated Command Execution Exploit
This Metasploit module exploits the embedded Lua interpreter in the admin web interface for versions 4.3.8 and below. When supplying a specially crafted HTTP POST request an attacker can use os.execute to execute arbitrary system commands on the target with SYSTEM privileges. This module requires...
Wing FTP Server Authenticated Command Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wing FTP Server Authenticated Command Execution', 'Description' = %q This module exploits the embedded Lua interpreter in the admin w...
Wifi FTP Server iOS - Directory Traversal Vulnerability
Document Title: =============== Wifi FTP Server iOS - Directory Traversal Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1299 View: https://www.youtube.com/watch?v=M67s2AEr32k Release Date: ============= 2014-08-25 Vulnerability Laboratory ID VL-ID:...
Wifi FTP Server iOS - Directory Traversal Vulnerability
Document Title: =============== Wifi FTP Server iOS - Directory Traversal Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1299 View: https://www.youtube.com/watch?v=M67s2AEr32k Release Date: ============= 2014-08-25 Vulnerability Laboratory ID VL-ID:...
WebSTAR FTP Server USER 溢出漏洞
No description provided by source...
Cerberus FTP Server 6.x < 6.0.10.0 / 7.x < 7.0.0.3 Multiple OpenSSL Vulnerabilities
The version of Cerberus FTP Server on the remote host is version 6.x prior to 6.0.10.0 or version 7.x prior to 7.0.0.3. It is, therefore, affected by the following OpenSSL vulnerabilities : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions or...
Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability
From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...
Yahoo!: Out-of-band read of arbitrary ASCII files on YQL backend servers via XML external parameter entities
The Yahoo Query Language YQL service allowed arbitrary XML documents to be loaded via the feednormalizer table and its prexslurl parameter. This enabled an attacker to exfiltrate data from the YQL backend servers by defining external parameter entities in the XML document that read local files. T...
Serv-U FTP Server < 15.1.0.458 Multiple Vulnerabilities
According to its banner, the installed version of Serv-U is a version prior to 15.1.0.458. It is, therefore, affected by a cross-site scripting vulnerability, an information-disclosure vulnerability, and multiple unspecified security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security...
Yak! Chat Client 2.x FTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can ultimately allow an...
FreeFloat FTP Server 1.0 - ACCL Buffer Overflow Exploit
No description provided by source. !/usr/bin/python +Exploit Title: FreeFloat FTP Server ACCL Buffer Overflow Exploit +Date: 19\06\2011 +Author: mortis +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 English +CVE: N/A from socket...
Cerberus FTP Server 2.1 Information Disclosure Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness...
Meteor FTP Server 1.2/1.5 USER Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash. Further...
Cat Soft Serv-U 2.5/a/b,Windows 2000/95/98/NT 4.0 Shortcut Vulnerability
No description provided by source. Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcut Vulnerability source:...
QPC Software QVT Term 4.3/QVT/Net 4.3 Suite FTP Server DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that i...