CVE-2020-12128

CVE-2020-12128 affects File Transfer iFamily 2.1, enabling directory traversal via the ./etc/ path. Red Hat and multiple national CNVD/NVD entries corroborate a path traversal vulnerability in iFamily 2.1, potentially allowing an attacker to influence the local application/file system. The CNVD e...

CVE-2020-12128

DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path...

Denial of Service Vulnerability in wzdftpd

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in wzdftpd, which can be exploited by an attacker to cause the server to deny service...

Denial of Service Vulnerability in wzdftpd

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in wzdftpd, which can be exploited by an attacker to cause the server to deny service...

[SECURITY] Fedora 31 Update: libssh-0.9.4-2.fc31

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

Swift File Transfer Mobile Cross Site Scripting / Information Disclosure

Document Title: =============== Swift File Transfer Mobile - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2205 Release Date: ============= 2020-04-17 Vulnerability Laboratory ID VL-ID: ====================================...

File Transfer iFamily 2.1 - Directory Traversal Vulnerability

Exploit for iOS platform in category web applications Title: File Transfer iFamily 2.1 - Directory Traversal Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability Vulnerability Clas...

File Transfer iFamily 2.1 Directory Traversal

Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2199 Release Date: ============= 2020-04-14 Vulnerability Laboratory ID VL-ID:...

File Transfer iFamily 2.1 - Directory Traversal

Title: File Transfer iFamily 2.1 - Directory Traversal Author: Vulnerability Laboratory Date: 2020-04-15 Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability References Source:...

Vastgota-Data ProVide Cross-Site Request Forgery Vulnerability

Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. A cross-site request forgery vulnerability exists in Vastgota-Data ProVide version 13.1 and earlier. The vulnerability stems from a WEB application that does not adequately validate that a...

Vastgota-Data Cross-Site Request Forgery Vulnerability

Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. A cross-site request forgery vulnerability exists in the user web interface in Vastgota-Data ProVide 13.1 and prior versions. The vulnerability stems from the WEB application not adequately...

File Transfer iFamily 2.1 - Directory Traversal Vulnerability

Document Title: =============== File Transfer iFamily 2.1 - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2199 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12128 CVE-ID: ======= CVE-2020-12128 Release Date...

Arbitrary Code Execution

pidgin is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the way Pidgin initiates file transfers when using the Extensible Messaging and Presence Protocol XMPP. If a Pidgin client initiates a file transfer, and the remote target sends a...

DNSteal v2.0 - DNS Exfiltration Tool For Stealthily Sending Files Over DNS Requests

This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported Now supports...

DEBIAN-CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

ALPINE-CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

FlashFXP Local Denial of Service Vulnerability

FlashFXP is a popular FTP client program. FlashFXP suffers from a local denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of service attack...

Moderate: Red Hat Security Advisory: lftp security update

An update for lftp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

VulnCheck KEV: CVE-2025-34129

A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the configuration interface can upload a...

SolarWinds Serv-U Managed File Transfer Web client Cross-Site Request Forgery Vulnerability

SolarWinds Serv-U Managed File Transfer Web client MFT is a file transfer client application from the American company SolarWinds. A cross-site request forgery vulnerability exists in the file upload feature of the SolarWinds Serv-U MFT Web client prior to version 15.1.6 Hotfix 2. An attacker can...