CVE-2015-7911

CVE-2015-7911 affects Saia Burgess PCD controllers (e.g., PCD1.M0xx0/M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD/V/WTPF, PCD7.D4xxxT5F; and PCD3.T665/T666) where hard-coded credentials grant remote administrative access via FTP. Impact: remote, unauthenticated admin access with no avail...

CVE-2015-7911

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via...

Scientific Linux Security Update : curl on SL7.x x86_64 (20151119)

It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...

Easy File Sharing FTP Server 3.6 Stack Buffer Overflow Exploit

Easy File Sharing FTP server version 3.6 suffers from a stack buffer overflow vulnerability. Exploit Title: Easy File Sharing FTP Server 3.6 0day - Stack Overflow Exploit Author: @zeifan Vendor Homepage: http://www.sharing-file.com/products.htm Software Link: http://www.efssoft.com/efsfs.exe...

Saia Burgess Controls PCD Controllers Hard-Coded FTP Credentials Vulnerability

Binary data 7183.pasl...

Easy File Sharing FTP Server 3.6 Stack Buffer Overflow

Exploit Title: Easy File Sharing FTP Server 3.6 0day - Stack Overflow Date: 13-12-2015 Exploit Author: @zeifan Vendor Homepage: http://www.sharing-file.com/products.htm Software Link: http://www.efssoft.com/efsfs.exe Version: 3.6 REQUIRED Tested on: Windows 7 SP1 x86 CVE : No CVE Vendor contacted...

rockoa ftpupload.php任意文件上传

No description provided by source...

用友软件某众多管理系统弱口令涉及(公司FTP/客户信息/工作日志/服务日志)

简要描述： 用友软件 详细说明： 账号 密码 callcenter callcenter admin sqbbagdp 管理地址 http://vip.ufida.com.cn/nccsm/ http://nczx.yonyou.com/SubModule/role/ 目录遍历 http://nczx.yonyou.com/Inc/ 内部FTP 内网：ftp://192.168.8.86 外网：ftp://125.35.5.232 ncservice ncservice2015 漏洞证明： img...

[SECURITY] Fedora 22 Update: wget-1.16.3-2.fc22

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 22 Update: proftpd-1.3.5a-5.fc22

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 23 Update: proftpd-1.3.5a-5.fc23

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

CentOS 7 : curl (CESA-2015:2159)

Updated curl packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Easy File Sharing HTTP Server 7.2 SEH Overflow

This module exploits a SEH overflow in the Easy File Sharing FTP Server 7.2 software. Module Options msf use exploit/windows/http/easyfilesharing/seh msf undefinedseh show actions ...actions... msf undefinedseh set ACTION msf undefinedseh show options ...show and set options... msf undefinedseh r...

CVE-2015-6386

The passthrough FTP feature on Cisco Web Security Appliance WSA devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service CPU consumption via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150...

Code injection

The passthrough FTP feature on Cisco Web Security Appliance WSA devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service CPU consumption via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150...

CVE-2015-6386

The Cisco Web Security Appliance (WSA) passthrough FTP feature is affected. A vulnerability in WSA software versions 8.0.7-142 and 8.5.1-021 can allow an unauthenticated, remote attacker to cause a denial of service via FTP sessions where the control connection is closed after data transfer (Bug ...

CVE-2015-6386

The passthrough FTP feature on Cisco Web Security Appliance WSA devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service CPU consumption via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native passthrough FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions migh...

Emerson SM-Ethernet FTP Server Default Credentials

Binary data scadaemersonsmethernetftpdefaultcredentials.nbin...

[SECURITY] Fedora 22 Update: libxml2-2.9.3-1.fc22

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...