CVE-2014-1843

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...

CVE-2014-1842

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. dot dot in the search-bar value...

Directory traversal

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...

Directory traversal

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. dot dot in the search-bar value...

Directory traversal

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...

CVE-2014-1843

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...

CVE-2014-1841

CVE-2014-1841 affects Titan FTP Server (

CVE-2014-1842

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. dot dot in the search-bar value...

CVE-2014-1843

CVE-2014-1843 describes a directory traversal vulnerability in Titan FTP Server’s web interface prior to version 10.40 build 1829. An attacker can use a malicious src parameter containing .. to trigger a traversal in the Properties action, enabling viewing the properties of an arbitrary home fold...

CVE-2014-1841

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...

CVE-2014-1842

CVE-2014-1842 is a directory traversal vulnerability in Titan FTP Server’s web interface. It allows remote attackers to enumerate usernames by supplying a ../ sequence in the search-bar (via the Go action). Affected: Titan FTP Server versions before 10.40 build 1829 (e.g., 10.32/build 1816). Impa...

KLA10366 OSI vulnerability in Titan FTP Server

A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...

Cerberus FTP Server < 5.0.8.0 / 6.x < 6.0.7.0 Web Client Security Bypass

The version of Cerberus FTP Server on the remote host is a version prior to 5.0.8.0 or version 6.x prior to 6.0.7.0. As such, it is potentially affected by a security bypass vulnerability. An authenticated attacker could obtain sensitive files via the HTTP/S interface. C Tenable Network Security,...

Easy FileManager 1.1 Local File Inclusion / Shell Upload

Document Title: =============== Easy FileManager 1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1234 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 12...

Cerberus FTP Server HTTP/S Web客户端安全限制绕过漏洞

Cerberus FTP Server是一款适用在Windows操作系统上的FTP服务程序。 Cerberus FTP Server 6.0.7之前版本在HTTP/S web客户端的实现上存在安全漏洞，可被恶意利用泄露服务器上的受限制访问资源。 0 Cerberus FTP Server 6.0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cerberusftp.com/...

CoreFTP本地代码执行漏洞

CVE ID:CVE-2013-1215 Core FTP Server是一款FTP服务程序。 Core FTP Server在使用lstrcpy和RegQueryValueEx函数来拷贝config.data文件或windows注册表中的数据时存在缓冲区溢出，允许攻击者利用漏洞使应用程序崩溃或执行任意代码。 0 Core FTP Server v1.2 build 505 厂商补丁： Core FTP ----- Core FTP Server v1.2 build 508已经修复该漏洞，建议用户下载更新： http://ww.coreftp.com/server...

Cisco IOS FTP Server Remote Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Core FTP Server Detection

Binary data coreftpserverdetect.nbin...

Serv-U FTP Server < 15.0.1.20 DoS

According to its banner, the installed version of Serv-U is a version prior to version 15.0.1.20. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution

The version of Core FTP running on the remote host is prior to 1.2 build 508. It is, therefore, affected by buffer overflow conditions in the RegQueryValueExA and lstrcpy functions due to improper validation of user-supplied input when reading data from the config.dat file and/or from the Windows...