Lucene search
+L

4041 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.10 views

The vulnerability of SAFECAM X300 video recorder software-related microprogramming systems, which stems from the use of default account data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of SAFECAM X300 video recorder software’s microprogramming system is related to the use of default login credentials when connected to an FTP server. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.00239EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/02 10:15 a.m.9 views

CVE-2025-27024

Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections. Details: Account members of the Network Administrator profile can access the target machine via SFTP with the same credentials used f...

6.5CVSS5.8AI score0.00337EPSS
SaveExploits0References2
Fedora
Fedora
added 2025/06/27 1:22 a.m.9 views

[SECURITY] Fedora 42 Update: libssh-0.11.2-1.fc42

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...

8.1CVSS7.5AI score0.01542EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/06/25 9:54 a.m.13 views

CVE-2025-27387

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure...

7.4CVSS7.3AI score0.00245EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/25 8:15 a.m.5 views

CVE-2024-51984

An authenticated attacker can reconfigure the target device to use an external service such as LDAP or FTP controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the...

6.8CVSS7.2AI score0.00876EPSS
SaveExploits0References10Affected Software82
NVD
NVD
added 2025/06/23 10:15 a.m.15 views

CVE-2025-27387

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure...

7.4CVSS0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/23 9:28 a.m.25 views

CVE-2025-27387

OPPO Clone Phone (CVE-2025-27387) is affected by an information disclosure due to a weak WPA/Wi‑Fi hotspot used to transfer files. The CVE details specify adjacent attack vector with low complexity and no privileges required, yielding confidentiality impact (high) while other impacts are not indi...

7.4CVSS7.4AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/23 9:28 a.m.23 views

CVE-2025-27387 OPPO Clone Phone uses weak WPA passphrase as only means of security

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure...

7.4CVSS0.00245EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/23 9:28 a.m.9 views

CVE-2025-27387 OPPO Clone Phone uses weak WPA passphrase as only means of security

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure...

7.4CVSS7.5AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.6 views

OPPO Clone Phone 信息泄露漏洞

OPPO Clone Phone is a cell phone cloning application from the Chinese company OPPO. OPPO Clone Phone suffers from an information leakage vulnerability that originates from the use of a weak password WiFi hotspot to transfer files resulting in information leakage...

7.4CVSS7.6AI score0.00245EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/20 12:0 a.m.10 views

The vulnerability of the NOOP command in the PCMan FTP server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the NOOP command in the PCMan FTP server is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

7.5CVSS8.1AI score0.0062EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.11 views

The vulnerability in the ZendTo web application for transferring files involves an incorrect restriction on the path to the restricted directory. This allows a malicious actor to gain read and write access to data, or cause a service failure.

The vulnerability in the web application for transferring files via ZendTo is related to an incorrect restriction on the path to the restricted directory during the processing of the tmpname parameter. Exploiting this vulnerability can allow an attacker to gain read and modify access to data, or...

6.5CVSS8AI score0.64856EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/06/12 3:15 p.m.10 views

CVE-2025-49197

The application uses a weak password hash function, allowing an attacker to crack the weak password hash to gain access to an FTP user account...

7.5CVSS5.8AI score0.00263EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.10 views

SICK Field Analytics和SICK Media Server 安全漏洞

SICK Field Analytics and SICK Media Server are both products of the German company SICK.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from an FTP logi...

9.8CVSS6.7AI score0.00471EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.7 views

ZendTo 安全漏洞

ZendTo is a web-based file transfer system from ZendTo Inc. A security vulnerability exists in ZendTo 6.10-6 Beta and earlier versions, which stems from an os command injection due to the misbehavior of the parameter file1 in the file NSSDropoff.php...

7.5CVSS7.7AI score0.01694EPSS
SaveExploits0References4
Amazon
Amazon
added 2025/06/09 12:0 a.m.7 views

Important: amazon-ssm-agent

Issue Overview: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. CVE-2025-22869 Affected Packages:...

7.5CVSS6.9AI score0.00905EPSS
SaveExploits0
OSV
OSV
added 2025/06/05 4:15 p.m.11 views

CVE-2025-5666

A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component XMKD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS7.3AI score0.00581EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/05 3:15 p.m.6 views

CVE-2025-5664

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RESTART Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and...

9.8CVSS6.1AI score0.00581EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/05 4:15 a.m.6 views

CVE-2025-5635

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component PLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS6.1AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/04 5:15 p.m.9 views

CVE-2025-5596

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component REGET Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

9.8CVSS6AI score0.00588EPSS
SaveExploits1References4
Rows per page
Query Builder