309 matches found
ProFTPd 1.3.5 文件复制
No description provided by source...
ProFTPD 1.3.5 Mod_Copy Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ProFTPD 1.3.5 ModCopy Command Execution', 'Description' = %q This module exploits the SITE CPFR/CPTO commands in ProFTPD version...
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ProFTPD 1.3.5 ModCopy Command Execution', 'Description' = %q This module exploits the SITE CPFR/CPTO commands in ProFTPD version...
Immunity Canvas: PROFTPD_MOD_COPY
Name| proftpdmodcopy ---|--- CVE| CVE-2015-3306 Exploit Pack| CANVAS Description| ProFTPd 1.3.5 Remote File Copy Notes| CVE Name: CVE-2015-3306 VENDOR: NOTES: This exploit abuses the commands of the modcopy module in ProFTPd version=1.3.5. The SITE CPFR/CPTO commands can be used by unauthenticate...
ProFTPd 1.3.5 File Copy
Description TJ Saunders 2015-04-07 16:35:03 UTC Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients: --------------------------------- Trying...
ProFTPd 1.3.5 - File Copy Vulnerability
Exploit for linux platform in category remote exploits Description TJ Saunders 2015-04-07 16:35:03 UTC Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients...
ProFTPd 1.3.5 - File Copy
Description TJ Saunders 2015-04-07 16:35:03 UTC Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients: --------------------------------- Trying...
KingView 6.53 - Insecure ActiveX Control (SuperGrid)
No description provided by source. html object classid='clsid:F494550F-A028-4817-A7B5-E5F2DCB4A47E' id='target'/object !-- KingView Insecure ActiveX Control - SuperGrid Vendor: http://www.wellintech.com Version: KingView 6.53 Tested on: Windows XP SP3 / IE Download:...
VMSA-2014-0001 VMware ESXi address several security issues (remote check).
VMware ESXi address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001remote.nasl 6769 2017-07-20 09:56:33Z teissa $ VMSA-2014-0001 VMware ESXi address several security issues remote check. Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone Networks GmbH This...
ESXi 5.1 < Build 1483097 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.1 host is affected by the following vulnerabilities : - A denial of service vulnerability exists in the bundled OpenSSL library that is triggered when handling OCSP response verification. A remote attacker can exploit this to crash the program. CVE-2013-0166 - An error...
CVE-2014-1207
VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service NULL pointer dereference by intercepting and modifying Network File Copy NFC traffic...
Null pointer dereference
VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service NULL pointer dereference by intercepting and modifying Network File Copy NFC traffic...
CVE-2014-1207
CVE-2014-1207 affects VMware ESXi/ESX: versions ESXi 4.0–5.1 and ESX 4.0–4.1 are vulnerable via a NULL pointer dereference in NFC traffic handling, allowing remote attackers to cause a denial of service by intercepting/modifying NFC traffic. The issue is evidenced in multiple sources (NVD entry a...
VMware Security Updates for vCenter Server (VMSA-2013-0003)
VMware has updated VMware vCenter Server to address a vulnerability in the Network File Copy NFC Protocol. OpenVAS Vulnerability Test $Id: gbvcenterVMSA-2013-0003.nasl 6637 2017-07-10 09:58:13Z teissa $ VMware Security Updates for vCenter Server VMSA-2013-0003 Authors: Michael Meyer Copyright:...
ESXi 5.1 < Build 911593 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.1 host is affected by the following security vulnerabilities : - An input validation error exists in the function 'pngsettext2' in the libpng library that could allow memory corruption and arbitrary code execution. CVE-2011-3048 - A privilege escalation vulnerability exis...
ESXi 5.0 < Build 1311175 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - Multiple errors exist related to OpenSSL that could allow information disclosure or denial of service attacks. CVE-2013-0166, CVE-2013-0169 - An error exists in the libxml2 library related to the expansion o...
NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0011 Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception Issue date: 2013-08-29 Updated on: 2013-08-29...
VMWare ESX / ESXi NFC DoS
Unhandled exception on Network File Copy protocol handling...
KingView 6.53 Active-X File Copy
KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlled share to the target or from the target to an attacker...
CVE-2013-1661
VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...