CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-6690: Origin Validation Error

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-16732

\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftpsave...

CVE-2018-15485

An issue was discovered on KONE Group Controller KGC devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03...

Apache Cayenne CayenneModeler XML External Entity Injection Vulnerability

Apache Cayenne is the United States Apache Apache Software Foundation of an open source persistence framework that provides object-relational mapping ORM and remote services . CayenneModeler is one of the graphical user interface . A security vulnerability exists in CayenneModeler in Apache Cayen...

CuteFTP 8.3.1 - Denial of Service (PoC)

CuteFTP 8.3.1 - Denial of Service PoC Exploit Title : CuteFTP 8.3.1 - Denial Of Service PoC Exploit Author : Ali Alipour WebSite : Alipour.it Date: 2018-08-22 Vendor Homepage : http://www.cuteftp.com/ Software Link Download : https://filehippo.com/downloadcuteftppro/4518/ Tested on : Windows 10 -...

CVE-2018-11758

CVE-2018-11758 affects Apache Cayenne CayenneModeler (desktop GUI for Cayenne ORM). It arises from XML External Entity (XXE) processing in the embedded XML parser, allowing a malicious XML file to trigger local file transfers to an attacker-controlled host. The vulnerability is mitigated by Cayen...

CVE-2018-11758

This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler is a desktop GUI tool shipped with Apache Cayenne and intended for editing Cayenne ORM models stored as XML files. If an attacker tricks a user of CayenneModeler into opening a...

PT-2018-10809

Name of the Vulnerable Software and Affected Versions Apache Cayenne versions 3.1 through 3.1.2 Apache Cayenne versions 3.2.M1 Apache Cayenne versions 4.0.B1 through 4.0.RC1 Apache Cayenne versions 4.0.M2 through 4.0.M5 Apache Cayenne version 4.1.M1 Description The issue affects CayenneModeler, a...

CVE-2018-11758: Improper Restriction of XML External Entity Reference

This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler is a desktop GUI tool shipped with Apache Cayenne and intended for editing Cayenne ORM models stored as XML files. If an attacker tricks a user of CayenneModeler into opening a...

curl: FTP PWD response parser out of bounds read

libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in anonymous or not, it asks the server for the current directory with the PWD command. The server then responds with a 257 response containing the path, inside double...

PT-2018-2455

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit 73cb96fec028a576a5a24417b57723b55854ad7b Description The issue is related to a heap use-after-free vulnerability in the server code of the file transfer extension. This vulnerability can result in remote code...

PT-2018-2464

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b Description The issue is related to a heap use-after-free vulnerability in the server code of the file transfer extension. This can allow a remote attacker to execute...

PT-2018-2456

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit 502821828ed00b4a2c4bef90683d0fd88ce495de Description The issue is related to a heap out-of-bound write in the server code of the file transfer extension, which can result in remote code execution. It is also...

Microsoft Windows: Configure Solicited Remote Assistance

This policy setting allows you to turn on or turn off Solicited Ask for Remote Assistance on this computer. If you enable this policy setting, users on this computer can use email or file transfer to ask someone for help. Also, users can use instant messaging programs to allow connections to this...

Service Bulletin 130: Updated File Naming Conventions for FTP

Abstract Direct this service bulletin to the persons at customer locations who are responsible for opening Problem Management Reports PMRs for the TPF products. This bulletin expands on information distributed in Service Bulletin 84: File Naming Conventions for FTP and Service Bulletin 112: New F...

DEBIAN-CVE-2018-10916

It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server,...

cURL Buffer Overflow

The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...

CVE-2018-9068

The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected. This information is made available for download through an SFTP server hosted on the IMM2 management network interface. In versions earlier than 4.90 for Leno...

CVE-2018-10627

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...