17013 matches found
📄 Monsta FTP DownloadFile Remote Code Execution
This Metasploit module exploits a pre-authenticated remote code execution vulnerability in Monsta FTP versions prior to 2.11.3. The vulnerability exists in the downloadFile action which allows an attacker to connect to a malicious FTP or SFTP server and download arbitrary files to arbitrary...
VulnCheck KEV: CVE-2025-34299
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
metasploitable-Security-Assessment comprehensive penetration t...
TencentOS Server 4: pure-ftpd (TSSA-2025:0246)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0246 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Exploit for CVE-2025-34299
Monsta FTP CVE-2025-34299 Exploit Python exploit for the RCE...
SolarWinds Serv-U 安全漏洞
SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a lack of an authentication process that could lead to code execution by an attacker with administrator privileges...
SolarWinds Serv-U 安全漏洞
SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a logic error that could lead to code execution by an attacker with administrator privileges...
PT-2025-47269
Name of the Vulnerable Software and Affected Versions Serv-U versions prior to 15.5.3 Description A Path Restriction Bypass exists in Serv-U that allows a malicious actor with administrative privileges to execute code on a directory. This requires administrative privileges to exploit. On Windows...
CVE-2018-25125
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument...
Maxum Rumpus FTP Server 跨站脚本漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site scripting vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper input neutralization and could lead to cross-site scripting attacks...
Maxum Rumpus FTP Server 跨站请求伪造漏洞
Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site request forgery vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from cross-site request forgery...
CVE-2018-25125
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument...
CVE-2018-25125 Netis DL4322D RTK 2.1.1 FTP Service DoS
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument...
PT-2025-47015
Name of the Vulnerable Software and Affected Versions Netis ADSL Router DL4322D firmware version RTK 2.1.1 Description The Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow issue within the embedded FTP service. An authenticated remote user can cause a denial of service by...
Netis ADSL Router 安全漏洞
Netis ADSL Router is a router from China Tiantan Netis that supports ADSL connections. A security vulnerability exists in the Netis ADSL Router DL4322D RTK version 2.1.1, which originates from a buffer overflow in the embedded FTP service, which could lead to a denial of service attack...
Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2020-8285)
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Siemens SIMATIC S7-1500 Cleartext Transmission of Sensitive Information (CVE-2021-22946)
A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl- reqd on the command line orCURLOPTUSESSL set to CURLUSESSLCONTROL or CURLUSESSLALL withlibcurl. This requirement...
Siemens SIMATIC S7-1500 Double Free (CVE-2019-5481)
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504277;...
curl: libcurl FTP path normalization flaw allows decoded %2e%2e → CWD .. and directory escape (Path Traversal, CWE-22)
ftpparseurlpath in lib/ftp.c URL-decodes FTP path segments e.g. %2e%2e and then splits the decoded path into components using an ad-hoc loop that skips empty components produced by //. The code does not perform canonical path normalization no stack-based handling of . or ... As a result, encoded...
CVE-2025-34299
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server...