16796 matches found
CVE-2020-19596
CVE-2020-19596 : A buffer overflow vulnerability exists in Core FTP Server v1.2 Build 583, exploitable via a crafted username. Affected component is the server’s input handling for usernames, leading to memory corruption. NVD data lists a high-severity impact (C/P/I/A affected; network attack vec...
CVE-2020-19596
Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username...
Security Bulletin: A Buffer Overflow Vulnerability in IBM Java Runtime Affects IBM Sterling Connect:Direct FTP+
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8.0.6.15, used by IBM Sterling Connect:Direct FTP+ on AIX and Linux platforms. IBM Sterling Connect:Direct FTP+ has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is...
Trojan.Win32.Sharer.h Man-In-The-Middle
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9f80c3b1e7f5f6f7d0c8aea25fe83551B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Sharer.h Vulnerability: Anonymous Logon MITM Port Bounce Scan Description: Sharer.h by...
Trojan.Win32.Sharer.h Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9f80c3b1e7f5f6f7d0c8aea25fe83551.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Sharer.h Vulnerability: Anonymous Logon RCE Description: Sharer.h by GOLDSWORD -...
Core FTP 缓冲区错误漏洞
Core FTP is a file transfer server. Core FTP Server v1.2 Build 583 suffers from a buffer error vulnerability that can be exploited by an attacker via a crafted username...
[SECURITY] Fedora 33 Update: curl-7.71.1-9.fc33
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2020-21588
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
CVE-2020-21588
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
Buffer overflow
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
CVE-2020-21588
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
CVE-2020-21588
CVE-2020-21588 affects Core FTP LE v2.2. The issue is a buffer overflow in the Setup->Users->Username editbox that allows a local attacker to cause a denial of service (crash) by supplying a long string. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD...
Ruby: lib/net/ftp.rb: trusting PASV responses allow client abuse
When net/ftp performs a passive FTP transfer, it tries to using PASV. Passive mode is what net/ftp uses by default. A server response to a PASV command includes the IPv4 address and port number for the client to connect back to in order to perform the actual data transfer. This is how the FTP...
PT-2021-4038
Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.6.8 Ruby versions 2.7.x through 2.7.3 Ruby versions 3.x through 3.0.1 Description The issue is related to the implementation of the Net::FTP class in the Ruby interpreter, which has weaknesses in protecting service dat...
[slackware-security] seamonkey
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/seamonkey-2.53.7-i686-1slack14.2.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...
Debian DSA-4881-1 : curl - security update
Multiple vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2020-8169 Marek Szlagor reported that libcurl could be tricked into prepending a part of the password to the host name before it resolves it, potentially leaking the partial password over the network and to the DNS...
USN-4898-1: curl vulnerabilities
Viktor Szakats discovered that curl did not strip off user credentials from referrer header fields. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2021-22876 Mingtao Yang discovered that curl incorrectly handled session tickets when using an HTTPS proxy. A...
Backdoor.Win32.Burbul.b Authentication Bypass / Man-In-The-Middle
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3ee4cb2e06eb1f7fe54c89db903f3e7aB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Burbul.b Vulnerability: Authentication Bypass MITM Port Bounce Scan Description: The...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...