7185 matches found
CVE-2012-10030 FreeFloat FTP Server Arbitrary File Upload
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...
CVE-2012-10030
The CVE-2012-10030 entry describes a vulnerability in FreeFloat FTP Server where unauthenticated attackers can upload arbitrary files to sensitive system directories (e.g., C:\ root, system32, wbem\mof). The underlying issue is design flaws that allow unrestricted file uploads and destination pat...
CVE-2012-10030 FreeFloat FTP Server Arbitrary File Upload
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...
PT-2025-31987 · Unknown · Turbo Ftp Server
Name of the Vulnerable Software and Affected Versions: Turbo FTP Server versions 1.30.823 through 1.30.826 Description: Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow in the handling of the PORT command. Sending a specially crafted payload allows a remote, unauthenticat...
PT-2025-31982 · Unknown · Freefloat Ftp Server
Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server affected versions not specified Description: FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server...
PT-2025-31975 · Unknown · Freefloat Ftp Server
Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0.0 Description: A stack-based buffer overflow exists in the server. The server does not properly validate input sent to the USER command, potentially allowing remote attackers to overwrite memory and execute...
Codeorigin Sysax Multi Server 安全漏洞
Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. A security vulnerability exists in Codeorigin Sysax Multi Server version 6.10 that stems from not properly handling SSH key exchange data, which could result in a denial of...
CVE-2012-10023: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long...
CVE-2012-10035: Buffer Copy without Checking Size of Input
Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges...
CVE-2012-10030: Unrestricted Upload of File with Dangerous Type
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...
The vulnerability of the Parameter Handler component in the downloadpass.html file of the FTP server Wing allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Parameter Handler component in the downloadpass.html file of the FTP server Wing is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by introducing malicious...
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title:...
CVE-2025-44655
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chrootlocaluser option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎...
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
=========================================================== CVE...
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
CVE-2025-47812 How does this detection method work? This...
PT-2025-29891 · Lilin · Lilin Digital Video Recorder
Name of the Vulnerable Software and Affected Versions: LILIN Digital Video Recorder DVR versions prior to 2.0b60 20200207 Description: A command injection issue exists due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the...
CVE-2025-34129: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the configuration interface can upload a malicio...
CVE-2025-7357: Plaintext Storage of a Password
LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...
PT-2025-29590 · Liteon · Ic80A +1
Name of the Vulnerable Software and Affected Versions: LITEON IC48A firmware versions prior to 01.00.19r LITEON IC80A firmware versions prior to 01.01.12e Description: LITEON IC48A and IC80A EV chargers store FTP-server-access-credentials in cleartext in their system logs. Recommendations: Update...