Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery (Add User)

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery Add User Exploit Title: CSRF add arbitrary users Google Dork: Date: 2015-04-28 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org/ Vendor Homepage: http://www.wftpserver.com/serverhistory.htm Software Link:...

Advisory: Filezilla FTP server is vulnerable to FTP PORT bounce

Dear list A security advisory for Filezilla FTP server versions 0.8.0-0.9.50 is available at http://www.securitygalore.com/site3/filezillaftpserveradvisory A new version of Filezilla FTP server 0.9.51 is available for immediate download at https://filezilla-project.org/download.php?type=server I...

CSRF & XSS Wing FTP Server Admin <= v4.4.5

Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 Source: ==================================== http://hyp3rlinx.altervista.org/advisories/AS-WFTP0328.txt Common Vulnerability Scoring System: ==================================== Overal...

i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

Attachmate Reflection FTP Client PWD Command Buffer Overflow (CVE-2014-5211)

A stack-based buffer overflow vulnerability exists in Attachmate Reflection FTP Client. The vulnerability is caused by insufficient boundary checking while processing PWD command responses. An attacker could exploit this vulnerability by enticing a user to access an FTP server that sends speciall...

[SECURITY] Fedora 21 Update: proftpd-1.3.5-5.fc21

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Double the bang for your buck with Acunetix Vulnerability Scanner

Acunetix have announced that they are extending their current free offering of the network security scan, part of their cloud-based web and network vulnerability scanner. Those signing up for a trial of the online version of Acunetix vulnerability scanner will now be able to scan their perimeter...

Vulnerability-Riddled Drug Pumps Open to Takeover

One medical device company’s line of drug pumps is so fraught with vulnerabilities that the researcher that discovered the flaws claims the pump is the least secure IP-enabled device he’s ever come across. Certain versions of Hospira’s Lifecare PCA3 Drug Infusion pumps are susceptible to multiple...

[USN-2591-1] curl vulnerabilities

========================================================================== Ubuntu Security Notice USN-2591-1 April 30, 2015 curl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Wing FTP Server Admin /admin_viewstatus.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . A cross-site scripting vulnerability exists in Wing FTP Server Admin /adminviewstatus.html, which allows remote attackers to exploit the vulnerability to inject...

Wing FTP Server Admin /admin_loglist.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /adminloglist.html domain parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

Wing FTP Server Admin /admin_loglist.html Cross-Site Request Forgery Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . A cross-site request forgery vulnerability exists in WingFTPServer Admin /adminloglist.html, which allows remote attackers to construct malicious URIs, trick users...

[SECURITY] Fedora 20 Update: proftpd-1.3.4e-3.fc20

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 22 Update: proftpd-1.3.5-6.fc22

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 22 Update: mingw-curl-7.42.0-1.fc22

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

USN-2591-1: curl vulnerabilities

Paras Sethia discovered that curl could incorrectly re-use NTLM HTTP credentials when subsequently connecting to the same host over HTTP. CVE-2015-3143 Hanno Böck discovered that curl incorrectly handled zero-length host names. If a user or automated system were tricked into using a specially...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability Scoring System: ==================================== Overa...