squid34: Fix of 3 CVEs

CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename - CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared masksize heap buffer overflow...

CVE-2025-47812

CVE-2025-47812 How does this detection method work? This Nuclei template detects Wing FTP Server instances vulnerable to CVE-2025-47812 by identifying versions older than 7.4.4 exposed in the web client’s HTML response. How do I run this script? 1. Download Nuclei from here 2. Copy the template t...

CVE-2026-105420

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

CVE-2026-105420

The Wing FTP Server is vulnerable to a path traversal issue (CWE-22) because it fails to verify the user's base folder. An attacker with admin privileges can use scripts to add user directories that escape the base folder. This allows the attacker to write files to the system, potentially leading...

EUVD-2026-112084

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

PT-2026-128231

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...

FreeFloat FTP Server 1.0 Stack Buffer Overflow

FreeFloat FTP Server version 1.0 contains a stack-based buffer overflow in the NOOP command handler. The supplied proof of concept documentation demonstrates control of EIP and remote code execution in a laboratory environment. https://packetstorm.news/download/237895...

SUSE SLES15 Security Update : squid (SUSE-SU-2026:4909-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4909-1 advisory. - CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. - CVE-2023-49288: Use-After-Free in the HTTP Collapsed...

FreeFloat FTP Server 1.0 NOOP Buffer Overflow

FreeFloat FTP Server version 1.0 contains a buffer overflow in the NOOP command handler. This proof of concept documents fuzzing, EIP control, bad character identification, and JMP ESP validation. https://packetstorm.news/download/237891...

Wing FTP Server CVE-2025-47812 unauth Lua RCE

CVE-2025-47812 Wing FTP = 7.4.3: NULL-byte truncation in loginok.html breaks out of the per-session Lua username string and injects io.popen when dir.html loads the session. Works with anonymous login when enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Wing FTP Server CVE-2025-47812...

Wing FTP CVE-2025-47812 Detect

Detects Wing FTP web client authenticated RCE chain. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Wing FTP web client authenticated RCE chain.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Wing FTP...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 is vulnerable to out-of-bounds reads and writes specifically within the FTP Server RX Buffer . The underlying cause is identified as a Signed to Unsigned Conversion Error (CWE-195). While the technical impact is noted as partial with potential for low integrity and a...

EUVD-2026-109921

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server

CVE-2025-5548: FreeFloat FTP Server 1.0 - Stack-Based Buffer O...

httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response

A flaw was found in httpd. When configured as a forward proxy using the modproxyftp module, the server improperly validates the network address returned in a File Transfer Protocol FTP passive mode PASV response. A malicious FTP server can exploit this flaw by returning a crafted reply, forcing t...

Security update for squid

This update for squid fixes the following issues: CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature bsc1217825. CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to th...