19514 matches found
EUVD-2026-72281
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254: Relative Path Traversal
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
PT-2026-86641
Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.10.18 Description The ftp and scp tasks allow downloading files from remote servers. A malicious server or a machine-in-the-middle attacker can provide relative paths that enable writing files outside the...
VulnCheck KEV: CVE-2026-60105
Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. An unauthenticated attacker can obta...
CVE-2026-78254: Relative Path Traversal
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
Linux Distros Unpatched Vulnerability : CVE-2026-78254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...
Exploit for Classic Buffer Overflow in Pcman Ftp_Server
CVE-2025-42...
SUSE CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
SUSE CVE-2026-71311
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the...
SUSE-SU-2026:23520-1 Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962...
SUSE-SU-2026:23455-1 Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962...
GHSA-W246-X8QV-R8F5 vulnerabilities
Vulnerabilities for packages: python...
Security Bulletin: MongoDB Enterprised Advanced affected by: Uncontrolled Resource Consumption (CVE-2026-44240)
Summary There are vulnerabilities in basic-ftp-5.3.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-44240. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-44240 DESCRIPTION: basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is...
Security Bulletin: MongoDB Enterprised Advanced affected by: CRLF Injection (CVE-2026-39983)
Summary There are vulnerabilities in basic-ftp-5.2.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-39983. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-39983 DESCRIPTION: basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows F...
CVE-2026-38577-by-deepak-Anmol
CVE-2026-38577 — Tenda HG21 Hardcoded Root Credentials Summary Field| Value ---|--- CVE ID| CVE-2026-38577 Vendor| Tenda Product| Tenda HG21 XPON Fiber Modem Affected Version| V4.0.0-260302 Product Key| HG21-V1.0-TDE01 Hardware Version| V1.0 Firmware Build Date| 2026-03-02 Firmware File|...
[SECURITY] Fedora 44 Update: proftpd-1.3.9d-2.fc44
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 43 Update: proftpd-1.3.9d-2.fc43
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd...
GHSA-9HJF-W35W-6VX2 elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
Summary The PHP connector's CSRF gate protects many mutating commands, but it does not protect the netmount connector command. In the shipped minimal connector setup, FTP network mounting is enabled by default, so a cross-site request can force an elFinder instance to mount an attacker-chosen FTP...
elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
Summary The PHP connector's CSRF gate protects many mutating commands, but it does not protect the netmount connector command. In the shipped minimal connector setup, FTP network mounting is enabled by default, so a cross-site request can force an elFinder instance to mount an attacker-chosen FTP...