4492 matches found
UBUNTU-CVE-2019-12528
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...
Design/Logic Flaw
Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...
CVE-2020-8503
The CVE-2020-8503 issue affects Biscom Secure File Transfer (SFT) versions 5.0.1050–5.1.1067 and 6.0.1000–6.0.1003. A vulnerability in the file-upload feature allows Insecure Direct Object Reference (IDOR) by an authenticated sender due to an error in how uploads are handled. The impact is descri...
CVE-2020-8503
Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...
CVE-2020-8503: Authorization Bypass Through User-Controlled Key
Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...
PT-2020-20180
Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.0.1050 through 5.1.1067 Biscom Secure File Transfer SFT versions 6.0.1000 through 6.0.1003 Description The issue allows Insecure Direct Object Reference IDOR by an authenticated sender due to an error...
curl: heap buffer overflow in function tftp_receive_packet()
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
curl: double free due to subsequent call of realloc()
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3...
CVE-2020-8001
The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...
thc-tips-tricks-hacks-cheat-sheet
THC's favourite Tips, Tricks & Hacks Cheat Sheet https://th...
Pachev FTP Server 1.0 Path Traversal
Exploit Title: Pachev FTP Server 1.0 - Path Traversal Date: 2020-01-23 Vulnerability: Path Traversal Exploit Author: 1F98D Vendor Homepage: https://github.com/pachev/pachevftp from ftplib import FTP ip = rawinput"Target IP: " port = intrawinput"Target Port: " ftp = FTP ftp.connecthost=ip, port=po...
Denial of Service Vulnerability in Quick Easy FTP Server (CNVD-2020-12893)
Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server. An attacker can exploit the vulnerability to cause a denial of service...
Denial of Service Vulnerability in Quick Easy FTP Server (CNVD-2020-12894)
Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server. An attacker can exploit the vulnerability to cause a denial of service attack on the target server...
Bftpd < 5.4 Multiple Vulnerabilities
Bftpd is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6835
An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...
Heap overflow
An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...
CVE-2020-6835
An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...
CVE-2020-6835
An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...
CVE-2020-6835
CVE-2020-6835 affects Bftpd before 5.4. The vulnerability is a heap-based off-by-one error during file-transfer error checking. The NVD entry lists CVSS v2 base 7.5 (high) and CVSS v3.1 base 9.8 (critical) with Network attack vector, no user interaction required. Red Hat and OpenVAS references re...
PT-2020-19253
Name of the Vulnerable Software and Affected Versions Bftpd versions prior to 5.4 Description An issue was discovered in Bftpd. There is a heap-based off-by-one error during file-transfer error checking. Recommendations For versions prior to 5.4, update to version 5.4 or later to resolve the issu...