Lucene search
+L

17011 matches found

CNNVD
CNNVD
added 2026/02/03 12:00 a.m.20 views

Konica Minolta FTP Utility 安全漏洞

Konica Minolta FTP Utility is a scanning software developed by Konica Minolta, Inc. in Japan. Version 1.0 of Konica Minolta FTP Utility contains a security vulnerability, which stems from a buffer overflow in the LIST command. This vulnerability may allow unauthorized code to be executed...

9.8CVSS6.1AI score0.00598EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.11 views

PT-2026-5818

Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing that allows attackers to crash the service. Attackers can send an oversized FEAT command with 11,008 bytes of repeated characters to trigger a buffer overflow and terminate the FTP service...

9.8CVSS6AI score0.00387EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/01/31 12:30 a.m.14 views

EUVD-2020-30945

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.6AI score0.01081EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-47865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections...

8.7CVSS6.1AI score0.00559EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/30 11:16 p.m.10 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.4AI score0.01081EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/30 11:16 p.m.17 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS0.01081EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/30 10:07 p.m.34 views

CVE-2020-37032

Wing FTP Server 6.3.8 is affected by a remote code execution flaw in the Lua-based web console. The issue allows authenticated users to send crafted POST requests that trigger operating system commands via os.execute(), enabling arbitrary code execution on the server. Affected component: Lua-base...

8.8CVSS6.6AI score0.01081EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/30 10:07 p.m.7 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.6AI score0.01081EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 10:07 p.m.9 views

CVE-2020-37032 Wing FTP Server 6.3.8 - Remote Code Execution

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.5AI score0.01081EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2026/01/30 12:00 a.m.219 views

📄 Monsta FTP 2.11 Remote File Injection

This Metasploit module exploits a vulnerability in Monsta FTP version 2.11 and enables remote file injection by creating a malicious FTP server. The application builds this server to upload a malicious PHP file reverse shell. After the file is uploaded, the module immediately verifies the...

9.8CVSS5.9AI score0.72667EPSS
SaveExploits6
CNNVD
CNNVD
added 2026/01/30 12:00 a.m.15 views

Wing FTP Server: Operating System Command Injection Vulnerability

Wing FTP Server is an open-source, cross-platform FTP server software developed by Wing FTP Server. Version 6.3.8 of Wing FTP Server contains a vulnerability related to operating system command injection. This vulnerability stems from the command execution feature in the Lua-based Web console,...

8.8CVSS6AI score0.01081EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/30 12:00 a.m.11 views

PT-2026-5473

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.3.8 Description The software contains a remote code execution issue in its Lua-based web console. Authenticated users can execute system commands by sending malicious commands via POST requests. The os.execute functio...

8.8CVSS6.6AI score0.01081EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/29 3:16 p.m.20 views

CVE-2020-36994

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionali...

6.2CVSS0.00174EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.4 views

CVE-2020-36994

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionali...

6.2CVSS6AI score0.00174EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/01/29 2:28 p.m.10 views

EUVD-2020-30918

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionali...

6.2CVSS6AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/29 2:28 p.m.28 views

CVE-2020-36994

CVE-2020-36994 affects QlikView 12.50.20000.0 and concerns a denial-of-service vulnerability in the FTP server address input field. According to the provided documents, a local attacker can crash the application by pasting a 300-character buffer into the FTP server address field, resulting in an ...

6.2CVSS6AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/27 6:52 p.m.17 views

CVE-2020-36983

CVE-2020-36983 concerns an unquoted service path in Quick 'n Easy FTP Service 3.2. This misconfiguration lets local attackers cause arbitrary code execution during service startup by injecting a malicious binary into the service path, granting elevated LocalSystem privileges at boot or on service...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/27 6:52 p.m.5 views

CVE-2020-36983

Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during syste...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/01/27 6:52 p.m.11 views

EUVD-2020-30868

Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during syste...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.19 views

PT-2026-5006

Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during syste...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References5
Rows per page
Query Builder