PT-2024-41070 · Мир Кт-51 +1 · Мир Кт-51 +1

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР конфигуратора контроллеров affected versions not specified Description: The issue is related to the implementation of the FTP protocol, which transmits data in an open form. This could allow a remote attacker to disclose...

Synology DiskStation Manager Use After Free (CVE-2021-27649)

Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

The vulnerability of the File Transfer Protocol (FTP) implementation in the microprogrammed network devices of Zyxel ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN allows a perpetrator to execute arbitrary commands.

The vulnerability of the File Transfer Protocol FTP implementation in the microprogrammed network devices Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability...

Vulnerabilities fixed in Progress WS_FTP server

Progress has fixed vulnerabilities in WSFTP server. A malicious party can exploit the vulnerabilities to bypass two-factor authentication, which allows it to log in with just username and password. Also, through directory traversal, the malicious party may be able to gain access to files that the...

SUSE CVE-1999-0183

Linux implementations of TFTP would allow access to files outside the restricted directory...

filestash 安全漏洞

filestash is a Dropbox-like file manager by the individual developer Mickael. A security vulnerability exists in filestash v0.4, which stems from a TLS certificate validation being skipped when using the FTPS protocol. An attacker can perform a man-in-the-middle attack via the Init function of...

PT-2024-6026 · Zyxel · Zyxel Usg Flex Series +3

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series versions V5.00 through V5.38 Zyxel USG FLEX series versions V5.00 through V5.38 Zyxel USG FLEX 50W series versions V5.00 through V5.38 Zyxel USG20W-VPN series versions V5.00 through V5.38 Description: A post-authentication...

Webuzo 安全漏洞

Webuzo is a powerful and easy-to-use web hosting control panel from Webuzo Inc. Allows hosting providers and users to automate server administration tasks while providing customers with the tools they need to manage their sites. A security vulnerability exists in Webuzo that stems from the...

CVE-2024-36059

Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol...

CVE-2024-36059: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol...

GHSA-23J4-MW76-5V7H Scrapy allows redirect following in protocols other than HTTP

Impact Scrapy was following redirects regardless of the URL protocol, so redirects were working for data://, file://, ftp://, s3://, and any other scheme defined in the DOWNLOADHANDLERS setting. However, HTTP redirects should only work between URLs that use the http:// or https:// schemes. A...

The vulnerability of the FTP protocol implementation in the software of the Yokogawa FA-M3 programmable logic controller allows a intruder to disclose protected information.

The vulnerability of the FTP protocol implementation in the software of the Yokogawa FA-M3 programmable logic controller is related to the transmission of secret information in the form of plain text. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the...

PyPXE 安全漏洞

PyPXE is a Python library open-sourced by PyPXE. A security vulnerability exists in PyPXE version v.1.8.4, which stems from the presence of a buffer overflow vulnerability that allows remote attackers to cause a denial of service via the handle function in the tftp module...

[SECURITY] Fedora 39 Update: filezilla-3.67.0-1.fc39

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFTP - Cross-platform - Available in many languages - Supports resume and transfer of large files greater than 4GB - Easy to use Site Manager and transfe...

The vulnerability of the implementation of Secure Copy Protocol and FTP (SFTP) protocols in the Cisco IOS XR operating system allows a hacker to induce a service failure.

The vulnerability of the Secure Copy Protocol and FTP SFTP implementations in the Cisco IOS XR operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to cause service failures...

DEBIAN-CVE-2024-31210

WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins - Add New - Upload Plugin screen in WordPress. If FTP credentials are requested for installation in order to move...

DJI Mavic 安全漏洞

DJI Mavic is a series of drones from Chinese company DJI. A security vulnerability exists in the DJI Mavic Mini 3 Pro that stems from the presence of an incorrect input validation issue that allows an attacker to craft malicious packets leading to a denial of service attack on the FTP service...

PT-2024-21969

Name of the Vulnerable Software and Affected Versions Dlink Dir-3040us A1 version 1.20b03a hotfix Description The issue allows any user with read/write access to the ftp server to write directly to ram, causing a buffer overflow if the uploaded file or files exceed the available ram. The ftp serv...

PT-2024-2575 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Secure Copy Protocol SCP and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system...

The vulnerability of the File Transfer Protocol (FTP) implementation in the microprogrammed networking devices of ZyXEL USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, USG FLEX H, and ATP allows a perpetrator to execute arbitrary commands.

The vulnerability of the File Transfer Protocol FTP implementation in microprogrammed network devices such as ZyXEL USG FLEX, USG FLEX 50W/USG20W-VPN, USG FLEX H, and ATP lies in the lack of measures to neutralize special elements used in operating system commands during the loading of binary...