[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Wing FTP Server Admin /admin_event_list.html type Cross Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /admineventlist.html type parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

Debian GNU/Linux Local Compromise Data Compromise

The numerous vulnerabilities in the ftpd package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Mandriva Linux Security Advisory : librsync (MDVSA-2015:204)

Updated librsync packages fix security vulnerability : librsync before 1.0.0 used a truncated MD4 strong check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part of a file could use it to control other regions...

MobaXterm - Terminal for Windows with X11 server, tabbed SSH client, network tools and much more...

MobaXterm is your ultimate toolbox for remote computing. In a single Windows application, it provides loads of functions that are tailored for programmers, webmasters, IT administrators and pretty much all users who need to handle their remote jobs in a more simple fashion. MobaXterm provides all...

Linkus Photo Manager Pro 4.4.0 Local File Inclusion Vulnerability

Linkus Photo Manager Pro version 4.4.0 suffers from a local file inclusion vulnerability. Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== Do you have troubles for managing thousands of photos...

UBUNTU-CVE-2015-1126

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

Apple Safari Incorrectly Handles FTP URL Authentication Credentials Vulnerability

Apple Safari is a popular WEB browser. Apple Safari fails to properly handle FTP URL authentication credentials vulnerability, allowing attackers to exploit the vulnerability to access other restricted resources...

LFTP Man-in-the-Middle Information Disclosure Vulnerability

LFTP is a multi-platform , multi-mode ftp, ftps, http, https, hftp, etc. based on the command line FTP client . LFTP suffers from a man-in-the-middle information disclosure vulnerability, which allows attackers to exploit this vulnerability to conduct man-in-the-middle attacks and obtain sensitiv...

Honeywell XL Web Controller Directory Traversal Vulnerability

Honeywell XL Web Controller is a web-based SCADA system. A security vulnerability exists in Honeywell XL Web Controller, which can be exploited by an attacker to access the Web Root directory of an affected system via a directory traversal vulnerability within the FTP server...

Qi Bo CMS variable coverage leads to sql injection vulnerability analysis report-vulnerability warning-the black bar safety net

Blog post author: Alibaba security research lab—supporting su Release date: 2015-3-10 Blog post content: The recent Alibaba security research laboratory vulnerability monitoring system to monitor attendance Bo cms exist high-risk vulnerabilities that can lead to SQL vulnerability and thus affect...

Photo Manager Pro v4.4.0 iOS - File Include Vulnerability

Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1445 Release Date: ============= 2015-03-12 Vulnerability Laboratory ID VL-ID: ====================================...

[SECURITY] Fedora 22 Update: lftp-4.6.1-4.fc22

LFTP is a sophisticated ftp/http file transfer program. Like bash, it has j ob control and uses the readline library for input. It has bookmarks, built-in mirroring, and can transfer several files in parallel. It is designed with reliability in mind...

[SECURITY] Fedora 20 Update: lftp-4.5.4-3.fc20

LFTP is a sophisticated ftp/http file transfer program. Like bash, it has j ob control and uses the readline library for input. It has bookmarks, built-in mirroring, and can transfer several files in parallel. It is designed with reliability in mind...

[SECURITY] Fedora 21 Update: lftp-4.5.4-4.fc21

LFTP is a sophisticated ftp/http file transfer program. Like bash, it has j ob control and uses the readline library for input. It has bookmarks, built-in mirroring, and can transfer several files in parallel. It is designed with reliability in mind...

Wireless File Transfer Pro Android Cross Site Request Forgery Vulnerability

Wireless File Transfer Pro Android suffers from a cross site request forgery vulnerability. Document Title: =============== Wireless File Transfer Pro Android - CSRF Vulnerabilities Common Vulnerability Scoring System: ==================================== 2.3 Product & Service Introduction:...

Wireless File Transfer Pro 1.0.1 CSRF

Document Title: =============== Wireless File Transfer Pro 1.0.1 - Android CSRF Remote Command Execution Creat, Delete Release Date: ============= 2015-02-10 Product & Service Introduction: =============================== Wireless File Transfer Pro is the advanced version of Wireless File Transfe...

libvncserver: server stacked-based buffer overflow flaws in file transfer handling

Two stack-based buffer overflow flaws were found in the way LibVNCServer handled file transfers. A remote attacker could use this flaw to crash the VNC server using a malicious VNC client...

Attachmate Reflection FTP Client Stack Buffer Overflow Vulnerability

Attachmate Reflection is a Unix terminal emulation software. A stack buffer overflow vulnerability exists in the Attachmate Reflection FTP client, which allows an attacker to exploit the vulnerability to execute arbitrary code within the context of the application...

Schneider Electric ETG3000 FactoryCast HMI Gateway FTP Built-in Password Vulnerability

The Schneider Electric ETG3000 FactoryCast HMI Gateway is a new intelligent Web gateway. A default account vulnerability exists in the Schneider Electric ETG3000 FactoryCast HMI Gateway FTP server, allowing an attacker to access the service without authentication...