4344 matches found
Patch now! Fortra GoAnywhere MFT vulnerability exploit available
On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT Managed File Transfer that allows an attacker to create a new admin user. Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange the...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
curl: FTP too eager connection reuse
A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, several FTP settings were left out from the configuration match checks, making them match too easily. The problematic...
PT-2024-15894 · Kmint21 · Kmint21 Golden Ftp Server
Name of the Vulnerable Software and Affected Versions: Kmint21 Golden FTP Server version 2.02b Description: A vulnerability was found in the PASV Command Handler component, which can lead to denial of service when manipulated. The attack can be initiated remotely. Recommendations: For Kmint21...
VulnCheck KEV: CVE-2024-0204
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal...
Golden FTP Server Security Vulnerability
Golden FTP Server is an FTP service. A security vulnerability exists in Golden FTP Server version 2.02b. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer
It is an exploit module targeting the GoAnywhere MFT vulnerabili...
Fortra GoAnywhere Managed File Transfer (MFT) < 7.4.1 Authentication Bypass (CVE-2024-0204)
Binary data fortragoanywheremftCVE-2024-0204.nbin...
The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.
The vulnerability of the TFTP Server component of the Korenix microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...
EFS Easy File Sharing FTP Security Vulnerability
EFS Software EFS Easy File Sharing FTP is an easy-to-use and powerful FTP Server software from EFS Software. A security vulnerability exists in EFS Easy File Sharing FTP version 3.6, which stems from a denial of service caused by the password parameter of the component Login...
PT-2024-15754 · Unknown · Efs Easy File Sharing Ftp
Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 2.0 Description: A problematic vulnerability was found in the software, affecting an unknown functionality. The manipulation of the username argument leads to denial of service. The attack can be launched...
FreeFloat FTP Server Security Vulnerability
FreeFloat FTP Server is an FTP service. A security vulnerability exists in FreeFloat FTP Server version 1.0 that stems from a denial of service DOS vulnerability in the SIZE Command Handler component...
PT-2024-15647 · Unknown · Ability Ftp Server
Name of the Vulnerable Software and Affected Versions: Ability FTP Server version 2.34 Description: A vulnerability has been found in the APPE Command Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. The exploit has been disclosed to the...
[SECURITY] Fedora 38 Update: libssh-0.10.6-2.fc38
The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...
CVE-2023-5376
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01...
Korenix JetNet Security Vulnerability
Korenix JetNet is an industrial 5-port 10 / 100Base-TX Ethernet switch from Korenix. A security vulnerability exists in Korenix JetNet firmware versions prior to 2024/01, which stems from incorrect authentication in TFTP, allowing users to upload and download files to the /home folder...
PT-2024-1168 · Korenix · Korenix Jetnet
Name of the Vulnerable Software and Affected Versions: Korenix JetNet devices versions prior to 2024/01 Description: The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to...