CVE-2019-6529

Kunbus PR100088 Modbus gateway devices are affected by CVE-2019-6529 due to improper input validation in an FTP service. A specially crafted FTP request could crash versions prior to Release R02 (Software Version 1.1.13166). The issue is confirmed across multiple feeds (NVD entry; Red Hat CVE pag...

CVE-2019-6529

An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 or Software Version 1.1.13166...

Bftpd Buffer Error Vulnerability

bftpd is a small , easy to configure FTP server for UNIX-like systems . A buffer error vulnerability exists in Bftpd version 5.3. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

[SECURITY] Fedora 30 Update: libssh-0.9.3-1.fc30

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value

in Apache HTTP Server versions 2.4.0 to 2.4.41, modproxyftp use of uninitialized value with malicious FTP backend...

CVE-2019-9668

An issue was discovered in rovinbhandari FTP through 2012-03-28. receivefile in filetransferfunctions.c allows remote attackers to cause a denial of service daemon crash via a 0xffff datalen field value...

Design/Logic Flaw

An issue was discovered in rovinbhandari FTP through 2012-03-28. receivefile in filetransferfunctions.c allows remote attackers to cause a denial of service daemon crash via a 0xffff datalen field value...

CVE-2019-9668

An issue was discovered in rovinbhandari FTP through 2012-03-28. receivefile in filetransferfunctions.c allows remote attackers to cause a denial of service daemon crash via a 0xffff datalen field value...

CVE-2019-9668

The CVE-2019-9668 entry concerns the rovinbhandari FTP server (through 2012-03-28). A flaw in the receive_file function (file_transfer_functions.c) allows a remote attacker to cause a denial-of-service (daemon crash) by sending a crafted datalen value of 0xffff. Exploit details are documented in ...

FTP Navigator 8.03 - Stack Overflow (SEH)

FTP Navigator 8.03 - Stack Overflow SEH Exploit Title: FTP Navigator 8.03 - Stack Overflow SEH Date: December 28th, 2019 Exploit Author: boku Discovered by: Chris Inzinga Original DoS: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Original DoS Link:...

Wing FTP Server 6.0.7 - Unquoted Service Path Vulnerability

Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://www.wftpserver.com/ Version: 6.0.7 Tested on: Windows 10 CVE : N/A PoC: C:\Users\usersc qc "Wing FTP Server" SC QueryServiceConfig SUCCESS SERVICENAME: Wing FTP Server TYPE : 10...

WEMS BEMS 21.3.1 - Undocumented Backdoor Account Vulnerability

Exploit for hardware platform in category web applications Exploit: WEMS BEMS 21.3.1 - Undocumented Backdoor Account Author: LiquidWorm Vendor: WEMS Limited Product web page: https://www.wems.co.uk Advisory ID: ZSL-2019-5552 Advisory URL:...

WEMS BEMS 21.3.1 - Undocumented Backdoor Account

Exploit: WEMS BEMS 21.3.1 - Undocumented Backdoor Account Date: 2019-12-30 Author: LiquidWorm Vendor: WEMS Limited Product web page: https://www.wems.co.uk Advisory ID: ZSL-2019-5552 Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5552.php WEMS BEMS 21.3.1 Undocumented Backdo...

Wing FTP Server 6.0.7 - Unquoted Service Path

Wing FTP Server 6.0.7 - Unquoted Service Path Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path Date: 2019-12-30 Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://www.wftpserver.com/ Version: 6.0.7 Tested on: Windows 10 CVE : N/A PoC: C:\Users\usersc qc "Wing FTP Server" SC...

FTP Navigator 8.03 - Stack Overflow (SEH)

Exploit Title: FTP Navigator 8.03 - Stack Overflow SEH Date: December 28th, 2019 Exploit Author: boku Discovered by: Chris Inzinga Original DoS: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Original DoS Link: https://www.exploit-db.com/exploits/47794 Software Vendor:...

Wing FTP Server 6.0.7 Unquoted Service Path

Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path Date: 2019-12-30 Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://www.wftpserver.com/ Version: 6.0.7 Tested on: Windows 10 CVE : N/A PoC: C:\Users\usersc qc "Wing FTP Server" SC QueryServiceConfig SUCCESS SERVICENAME: Wing FTP...

Wing FTP Server 6.0.7 - Unquoted Service Path

Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path Date: 2019-12-30 Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://www.wftpserver.com/ Version: 6.0.7 Tested on: Windows 10 CVE : N/A PoC: C:\Users\usersc qc "Wing FTP Server" SC QueryServiceConfig SUCCESS SERVICENAME: Wing FTP...

NETIS SYSTEMS DL4323 Information Disclosure Vulnerability

NETCORE Netis DL4323 is a multi-function modem from China's NETCORE. An information disclosure vulnerability exists in the NETCORE Netis DL4323, which can be exploited by an attacker to view sensitive information user passwords or FTP passwords...

FTP Navigator 8.03 Stack Overflow

Exploit Title: FTP Navigator 8.03 - Stack Overflow SEH Date: December 28th, 2019 Exploit Author: boku Discovered by: Chris Inzinga Original DoS: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Original DoS Link: https://www.exploit-db.com/exploits/47794 Software Vendor:...

Server-Side Request Forgery

Overview Versions of ftp-srv prior to versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request Forgery SSRF. The package fails to prevent remote clients to access other resources in the network, for example when connecting to the server through telnet. This allows attackers to acce...