NetSarang Computer Xftp FTP Client 安全漏洞

NetSarang Computer Xftp FTP Client is an FTP client software from NetSarang Computer, USA. A security vulnerability exists in NetSarang Computer Xftp FTP Client 3.0 build 0238 and earlier versions, which originates from processing PWD responses without validating the input length, and could lead ...

Hidden Functionality

Overview Affected versions of this package are vulnerable to Hidden Functionality via a hidden FTP command trigger in the process. An attacker can execute arbitrary shell commands with root privileges by sending a specially crafted FTP command. Remediation Upgrade proftpd/proftpd to version 1.3.3...

CVE-2011-10029

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

CVE-2011-10029 Solar FTP Server <= 2.1.1 Malformed USER Denial of Service

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

CVE-2011-10029

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

CVE-2011-10029 Solar FTP Server <= 2.1.1 Malformed USER Denial of Service

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

CVE-2011-10029

CVE-2011-10029 affects Solar FTP Server (

CVE-2010-10014

Odin Secure FTP = 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrite...

CVE-2010-10014 Odin Secure FTP <= 4.1 Stack Buffer Overflow via LIST Response

Odin Secure FTP = 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrite...

CVE-2010-20049

LeapFTP 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the Structured Exception Handler SEH chain...

PT-2025-34110 · Undefined · Undefined

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output 1 function of sfsservice.exe. This results in a denial of service DoS conditio...

Flexbyte Solar FTP Server 安全漏洞

Flexbyte Solar FTP Server is an FTP service from Flexbyte, Inc. A security vulnerability exists in Flexbyte Solar FTP Server that stems from improper handling of format strings when processing USER commands, which could lead to a denial of service...

Odin Secure FTP 安全漏洞

Odin Secure FTP is an FTP client software from Odin Secure. A security vulnerability exists in Odin Secure FTP 4.1 and earlier versions, which stems from a stack-based buffer overflow when parsing the response to the FTP LIST command, and could lead to the execution of arbitrary code...

CVE-2011-10010

QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the...

nineone152 (>=1.1.9 <=1.1.11) potentially affected by unknown CVE via node-ftp (=0.0.1-security)

node-ftp NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27624...

Malicious code in node-ftp (npm)

The package node-ftp was found to contain malicious code...

MAL-2025-27624 Malicious code in node-ftp (npm)

The package node-ftp was found to contain malicious code...

MAL-2025-21021 Malicious code in ftp-adaptor (npm)

The package ftp-adaptor was found to contain malicious code...

CVE-2011-10010

The CVE-2011-10010 entry affects QuickShare File Server 1.2.1 and describes a path traversal flaw in the FTP service caused by improper sanitation of user-supplied file paths. Authenticated users can submit crafted sequences to access/write files outside the virtual directory, and when the Writab...

Linux Distros Unpatched Vulnerability : CVE-2019-9809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these resources through inval...