Lucene search
+L

4344 matches found

Malwarebytes
Malwarebytes
•added 2024/01/25 1:32 p.m.•45 views

Patch now! Fortra GoAnywhere MFT vulnerability exploit available

On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT Managed File Transfer that allows an attacker to create a new admin user. Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange the...

7.5CVSS7.4AI score0.95086EPSS
SaveExploits9
RedHat Linux
RedHat Linux
•added 2024/01/25 11:15 a.m.•53 views

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

6.5CVSS6.6AI score0.01685EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2024/01/25 9:01 a.m.•49 views

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

6.5CVSS6.6AI score0.01685EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2024/01/25 8:12 a.m.•10 views

curl: FTP too eager connection reuse

A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, several FTP settings were left out from the configuration match checks, making them match too easily. The problematic...

5.9CVSS6.8AI score0.01607EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•13 views

PT-2024-15894 · Kmint21 · Kmint21 Golden Ftp Server

Name of the Vulnerable Software and Affected Versions: Kmint21 Golden FTP Server version 2.02b Description: A vulnerability was found in the PASV Command Handler component, which can lead to denial of service when manipulated. The attack can be initiated remotely. Recommendations: For Kmint21...

7.5CVSS7.1AI score0.01371EPSS
SaveExploits1References9
VulnCheck KEV
VulnCheck KEV
•added 2024/01/25 12:00 a.m.•8 views

VulnCheck KEV: CVE-2024-0204

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal...

9.8CVSS7.4AI score0.95086EPSS
SaveIn wildExploits9References818
CNNVD
CNNVD
•added 2024/01/25 12:00 a.m.•13 views

Golden FTP Server Security Vulnerability

Golden FTP Server is an FTP service. A security vulnerability exists in Golden FTP Server version 2.02b. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

7.5CVSS6.5AI score0.01371EPSS
SaveExploits1References4
GithubExploit
GithubExploit
•added 2024/01/23 10:42 p.m.•95 views

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

It is an exploit module targeting the GoAnywhere MFT vulnerabili...

9.8CVSS8.5AI score0.95086EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
•added 2024/01/23 12:00 a.m.•40 views

Fortra GoAnywhere Managed File Transfer (MFT) < 7.4.1 Authentication Bypass (CVE-2024-0204)

Binary data fortragoanywheremftCVE-2024-0204.nbin...

9.8CVSS9.6AI score0.95086EPSS
SaveExploits9References2
BDU FSTEC
BDU FSTEC
•added 2024/01/22 12:00 a.m.•20 views

The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.

The vulnerability of the TFTP Server component of the Korenix microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

9.4CVSS7.8AI score0.01414EPSS
SaveExploits3References5Affected Software40
CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•15 views

EFS Easy File Sharing FTP Security Vulnerability

EFS Software EFS Easy File Sharing FTP is an easy-to-use and powerful FTP Server software from EFS Software. A security vulnerability exists in EFS Easy File Sharing FTP version 3.6, which stems from a denial of service caused by the password parameter of the component Login...

7.5CVSS6.9AI score0.00985EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/18 12:00 a.m.•14 views

PT-2024-15754 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 2.0 Description: A problematic vulnerability was found in the software, affecting an unknown functionality. The manipulation of the username argument leads to denial of service. The attack can be launched...

7.5CVSS7AI score0.01303EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/01/15 12:00 a.m.•11 views

FreeFloat FTP Server Security Vulnerability

FreeFloat FTP Server is an FTP service. A security vulnerability exists in FreeFloat FTP Server version 1.0 that stems from a denial of service DOS vulnerability in the SIZE Command Handler component...

7.5CVSS6.7AI score0.01344EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•19 views

PT-2024-15647 · Unknown · Ability Ftp Server

Name of the Vulnerable Software and Affected Versions: Ability FTP Server version 2.34 Description: A vulnerability has been found in the APPE Command Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. The exploit has been disclosed to the...

7.5CVSS7.2AI score0.01354EPSS
SaveExploits1References8
Fedora
Fedora
•added 2024/01/10 1:52 a.m.•43 views

[SECURITY] Fedora 38 Update: libssh-0.10.6-2.fc38

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...

5.9CVSS6.6AI score0.93547EPSS
SaveExploits4
OSV
OSV
•added 2024/01/09 10:15 a.m.•13 views

CVE-2023-5376

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01...

9.1CVSS7.3AI score0.01414EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•30 views

Korenix JetNet Security Vulnerability

Korenix JetNet is an industrial 5-port 10 / 100Base-TX Ethernet switch from Korenix. A security vulnerability exists in Korenix JetNet firmware versions prior to 2024/01, which stems from incorrect authentication in TFTP, allowing users to upload and download files to the /home folder...

9.1CVSS7.1AI score0.01414EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•10 views

PT-2024-1168 · Korenix · Korenix Jetnet

Name of the Vulnerable Software and Affected Versions: Korenix JetNet devices versions prior to 2024/01 Description: The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to...

9.4CVSS9.2AI score0.01414EPSS
SaveExploits3References18
NVD
NVD
•added 2024/01/08 3:15 a.m.•27 views

CVE-2023-47140

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

8.1CVSS5.8AI score0.0022EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/08 3:15 a.m.•15 views

CVE-2023-47140

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

8.1CVSS5.8AI score0.0022EPSS
SaveExploits0References3
Rows per page
Query Builder